@@ -70,7 +70,7 @@ vendored-openssl = ["openssl/vendored"]
7070
7171[dependencies ]
7272# Kubernetes client with HTTP proxy support - use openssl-tls for better cert support
73- kube = { version = " 3.1 .0" , default-features = false , features = [
73+ kube = { version = " 4.0 .0" , default-features = false , features = [
7474 " client" ,
7575 " runtime" ,
7676 " derive" ,
@@ -79,8 +79,8 @@ kube = { version = "3.1.0", default-features = false, features = [
7979 " openssl-tls" ,
8080] }
8181# k8s-openapi version feature - must match kube-rs version
82- k8s-openapi = { version = " 0.27 .0" , default-features = false , features = [
83- " v1_31 " ,
82+ k8s-openapi = { version = " 0.28 .0" , default-features = false , features = [
83+ " v1_33 " ,
8484] }
8585
8686# Async runtime
@@ -175,20 +175,6 @@ name = "navigation_tests"
175175path = " tests/navigation_tests.rs"
176176required-features = [" tui" ]
177177
178- # TODO(#171): remove this patch once a published kube release includes the OpenSSL fix.
179- # Pending upstream: applies the OpenSSL `tls-server-name` fix (flux9s #170 / kube-rs #991).
180- # Tracks PR https://github.com/kube-rs/kube/pull/1993 (fork dgunzy/kube-rs, branch
181- # fix/openssl-tls-server-name). Pinned by rev for reproducible release builds — bump the rev
182- # when the PR branch advances, or use `branch = "fix/openssl-tls-server-name"` while iterating.
183- #
184- # The whole kube family must be patched to the SAME source: the fork's crates depend on each
185- # other via in-workspace paths, so patching only `kube-client` would mix a git `kube-core` with
186- # the crates.io one ("multiple versions of kube_core" / trait mismatches). All are at 3.1.0.
187- #
188- # Remove this whole block once a published kube release includes the fix, then `cargo update -p kube`.
189- [patch .crates-io ]
190- kube = { git = " https://github.com/dgunzy/kube-rs" , rev = " 46065c80446362f246e202c3e825fe43f649d929" }
191- kube-client = { git = " https://github.com/dgunzy/kube-rs" , rev = " 46065c80446362f246e202c3e825fe43f649d929" }
192- kube-core = { git = " https://github.com/dgunzy/kube-rs" , rev = " 46065c80446362f246e202c3e825fe43f649d929" }
193- kube-runtime = { git = " https://github.com/dgunzy/kube-rs" , rev = " 46065c80446362f246e202c3e825fe43f649d929" }
194- kube-derive = { git = " https://github.com/dgunzy/kube-rs" , rev = " 46065c80446362f246e202c3e825fe43f649d929" }
178+ # The OpenSSL `tls-server-name` fix (flux9s #170 / kube-rs #991, PR kube-rs/kube#1993)
179+ # shipped in kube 4.0.0, so the interim [patch.crates-io] fork pin has been removed (flux9s #171).
180+ # Reproduction harness: scripts/repro-tls-server-name.sh.
0 commit comments