Bump the kubernetes group across 1 directory with 5 updates

[dependabot]

Bumps the kubernetes group with 2 updates in the / directory: k8s.io/api and k8s.io/apiextensions-apiserver.

Updates k8s.io/api from 0.35.4 to 0.36.0

Commits

• 545bb97 Update dependencies to v0.36.0 tag
• 879d396 Merge remote-tracking branch 'origin/master' into release-1.36
• 030d81f Update github.com/moby/spdystream from v0.5.0 to v0.5.1
• aef6eb6 Add granular authorization for DRA ResourceClaim status updates
• 91061ea Merge pull request #136589 from tosi3k/preemption-mode
• e6b81e2 Add Workload-Aware Preemption fields to Workload and PodGroup APIs
• f8fce2e Merge pull request #136989 from nojnhuh/podgroup-resourceclaim
• b928f5e Workload API: PodGroup ResourceClaims (KEP-5729)
• 61bd78e Merge pull request #137190 from everpeace/KEP-5491-alpha
• 6bf46eb Merge pull request #137028 from nmn3m/feature/dra-resource-pool-status
• Additional commits viewable in compare view

Updates k8s.io/apiextensions-apiserver from 0.35.4 to 0.36.0

Commits

• 0ed55b7 Update dependencies to v0.36.0 tag
• 4cd8c3d Merge remote-tracking branch 'origin/master' into release-1.36
• c2fd557 Merge pull request #138346 from dashpole/update_otel_prop
• 1daa309 Merge remote-tracking branch 'origin/master' into release-1.36
• 1551264 Update github.com/moby/spdystream from v0.5.0 to v0.5.1
• 6c97d2b update go.opentelemetry.io/otel to v1.41.0
• 862c52a update google.golang.org/grpc to v1.79.3
• abac065 Merge pull request #137849 from bryantbiggs/deps/update-kube-openapi
• 7acee75 Merge pull request #137843 from pacoxu/cobra-v1.10.2
• 612f1d8 dependencies: bump kube-openapi to drop ginkgo/gomega indirect deps
• Additional commits viewable in compare view

Updates k8s.io/apimachinery from 0.35.4 to 0.36.0

Commits

• debe1eb Update dependencies to v0.36.0 tag
• efb7f26 Merge remote-tracking branch 'origin/master' into release-1.36
• d966e56 Update github.com/moby/spdystream from v0.5.0 to v0.5.1
• 79b3632 Merge pull request #137864 from yongruilin/dv-dra-mismatch
• a8822f7 Add slice and map union member support with tests
• 7dba2d0 Use IsZero instead of IsNil for union ratcheting check
• d95710f Fix union validation ratcheting when oldObj is nil
• 729062d Merge pull request #137849 from bryantbiggs/deps/update-kube-openapi
• 13b12e6 dependencies: bump kube-openapi to drop ginkgo/gomega indirect deps
• 27f4670 Merge pull request #136657 from Jefftree/sharding-test
• Additional commits viewable in compare view

Updates k8s.io/client-go from 0.35.4 to 0.36.0

Commits

• 1d95f02 Update dependencies to v0.36.0 tag
• f22a53e Merge remote-tracking branch 'origin/master' into release-1.36
• a948641 Update github.com/moby/spdystream from v0.5.0 to v0.5.1
• 7e44ffc Add Workload-Aware Preemption fields to Workload and PodGroup APIs
• df2d882 Merge pull request #136989 from nojnhuh/podgroup-resourceclaim
• 4eece52 Workload API: PodGroup ResourceClaims (KEP-5729)
• 3d35c51 Merge pull request #137190 from everpeace/KEP-5491-alpha
• 0434117 Merge pull request #137028 from nmn3m/feature/dra-resource-pool-status
• ba785be Drop CSR analogy, mark ObjectMeta +required,reduce limits (maxItems=500, maxL...
• 4a9c878 Add ResourcePoolStatusRequest API types and generated code
• Additional commits viewable in compare view

Updates k8s.io/utils from 0.0.0-20251002143259-bc988d571ff4 to 0.0.0-20260210185600-b8788abfbbc2

Commits

• See full diff in compare view

Summary by CodeRabbit

• Chores
  • Updated Go toolchain requirement to 1.26.0
  • Upgraded Kubernetes core modules and related libraries to version 0.36.0
  • Updated multiple indirect dependencies including REST API and monitoring libraries
  • Removed unused dependency and simplified dependency pins

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Repository: openshift/coderabbit/.coderabbit.yaml

Review profile: CHILL

Plan: Enterprise

Run ID: 15aa6839-101d-4bc2-8522-088dff5b37e8

📥 Commits

Reviewing files that changed from the base of the PR and between c998624 and c870654.

⛔ Files ignored due to path filters (1)

• go.sum is excluded by !**/*.sum

📒 Files selected for processing (1)

• go.mod

🚧 Files skipped from review as they are similar to previous changes (1)

• go.mod

---

Walkthrough

Bumps Go toolchain to 1.26.0 and updates go.mod Kubernetes modules to v0.36.0, adds k8s.io/streaming v0.36.0, and updates several indirect dependencies (Prometheus common/procfs, golang.org/x/time, google.golang.org/protobuf, etc.).

Changes

Cohort / File(s)	Summary
Go Module Dependencies go.mod	Updated Go version to 1.26.0; upgraded Kubernetes modules (k8s.io/api, k8s.io/apiextensions-apiserver, k8s.io/apimachinery, k8s.io/client-go) to v0.36.0; added k8s.io/streaming v0.36.0; bumped multiple indirect deps (Prometheus common/procfs, golang.org/x/time, google.golang.org/protobuf); removed github.com/mxk/go-flowrate and simplified sigs.k8s.io/structured-merge-diff/v6 pin.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~10 minutes

---

Important

Pre-merge checks failed

Please resolve all errors before merging. Addressing warnings is optional.

❌ Failed checks (1 error)

Check name	Status	Explanation	Resolution
Ote Binary Stdout Contract	❌ Error	Codebase contains critical OTE Binary Stdout Contract violation: klog.SetOutput(os.Stdout) in cmd/main.go line 46 corrupts JSON stdout communication.	Replace klog.SetOutput(os.Stdout) with klog.SetOutput(os.Stderr) or klog.LogToStderr(true) to redirect klog output to stderr before merging.

✅ Passed checks (11 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The PR title accurately describes the main change: bumping Kubernetes modules to version 0.36.0 across the go.mod file with five key updates.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Stable And Deterministic Test Names	✅ Passed	This pull request only updates Go module dependencies in go.mod and go.sum files with no modifications to test files.
Test Structure And Quality	✅ Passed	This pull request exclusively updates Go module dependencies in go.mod and go.sum files. No test code files were modified, added, or removed in this commit.
Microshift Test Compatibility	✅ Passed	PR only upgrades Kubernetes module dependencies in go.mod; no new Ginkgo e2e tests added, making this custom check inapplicable.
Single Node Openshift (Sno) Test Compatibility	✅ Passed	This PR only updates Go module dependencies in go.mod; no new Ginkgo e2e tests are added, making the SNO test compatibility check inapplicable.
Topology-Aware Scheduling Compatibility	✅ Passed	This PR only updates Go module dependencies in go.mod and does not modify deployment manifests or controller code, so the topology-aware scheduling check does not apply.
Ipv6 And Disconnected Network Test Compatibility	✅ Passed	This PR only modifies go.mod with dependency version updates and introduces no new Ginkgo e2e test code, making the custom check not applicable.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch dependabot/go_modules/kubernetes-b2bb6264f2

---

_{Review rate limit: 7/10 reviews remaining, refill in 16 minutes and 55 seconds.}

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[openshift-ci]

Hi @dependabot[bot]. Thanks for your PR.

I'm waiting for a openshift member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[coderabbitai]

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents

Verify each finding against the current code and only fix it if needed.

Inline comments:
In `@go.mod`:
- Around line 19-22: The Kubernetes client bump to v0.36.0 may introduce
breaking changes; search and update webhook validation code (e.g., any
ValidateAdmissionReview/ValidatePodSpec/ValidateDeploymentSpec handlers and
related manifest validators) to (1) remove or explicitly reject gitRepo volume
references in Pod/Deployment specs and add migration guidance, (2) stop
enforcing or assuming Service.spec.externalIPs exists in validation logic and
handle its absence gracefully, and (3) update monitoring/alerting and any metric
names referenced in code/config from volume_operation_total_errors to
volume_operation_errors_total; also run tests against v1.36 API types to ensure
type/signature compatibility after the go.mod bump.

🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

• Push a commit to this branch (recommended)
• Create a new PR with the fixes

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Repository: openshift/coderabbit/.coderabbit.yaml

Review profile: CHILL

Plan: Enterprise

Run ID: 33c03c0a-375b-485b-a9de-ad44fab095be

📥 Commits

Reviewing files that changed from the base of the PR and between 6d1db1e and c998624.

⛔ Files ignored due to path filters (1)

• go.sum is excluded by !**/*.sum

📒 Files selected for processing (1)

• go.mod

[coderabbitai]

⚠️ Potential issue | 🔴 Critical

🧩 Analysis chain

🌐 Web query:

Kubernetes 1.36.0 release notes breaking changes deprecations

💡 Result:

Kubernetes v1.36.0 breaking changes / deprecations (release notes) 1) gitRepo volume driver permanently disabled (removal) - Starting with Kubernetes v1.36, the gitRepo volume plugin is permanently disabled and cannot be turned back on. - Any workloads/POD specs that still use the gitRepo volume type will need to migrate (e.g., to initContainers or external git-sync style tooling), otherwise they will break. 2) Service.spec.externalIPs is deprecated (warn; removal planned later) - Kubernetes v1.36 marks Service.spec.externalIPs as deprecated. - Deprecation warnings will appear from v1.36 onward; Kubernetes states full removal is planned for v1.43. 3) Kubernetes v1.36 “Urgent Upgrade Notes” (actions required) - kube-controller-manager metric rename: volume_operation_total_errors was renamed to volume_operation_errors_total. - If you have custom monitoring/alerting dashboards based on the old metric name, you must update them. Where to read the official, complete list - Kubernetes v1.36 release announcement and links to the full release notes/changelog are published on the Kubernetes blog. - The authoritative per-feature deprecations/removals and upgrade notes are in the kubernetes/kubernetes CHANGELOG-1.36.md and are referenced by the v1.36.0 release tag. Practical upgrade checklist (based on the items above) - Search your manifests/Helm charts for “gitRepo” volumes and migrate them before upgrading to 1.36. - Search for “spec.externalIPs” usage and plan the migration away from it (removal targeted for 1.43). - Update monitoring/alerts for the kube-controller-manager metric rename (volume_operation_total_errors -> volume_operation_errors_total).

Citations:

• 1: https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.36.md
• 2: https://github.com/kubernetes/kubernetes/releases/tag/v1.36.0
• 3: https://kubernetes.io/blog/2026/04/22/kubernetes-v1-36-release/
• 4: http://kubernetes.io/blog/2026/03/30/kubernetes-v1-36-sneak-peek/
• 5: https://kubernetes.io/blog/2026/03/30/kubernetes-v1-36-sneak-peek

---

🏁 Script executed:

#!/bin/bash
# Description: Search for Kubernetes API usage patterns that might be affected by version changes

# Search for deprecated API usage patterns or version-specific code
rg -n --type=go -C3 'k8s\.io/(api|apimachinery|client-go)' | head -100

# Check for any version-specific comments or TODO items related to Kubernetes
rg -n --type=go -i 'TODO.*k8s|FIXME.*kubernetes|k8s.*version'

Repository: openshift/managed-cluster-validating-webhooks

Length of output: 7187

---

Review Kubernetes v1.36.0 breaking changes for compatibility.

Kubernetes v1.36.0 has been officially released and includes breaking changes that require validation:

1. gitRepo volume driver is permanently disabled — Any Pod or Deployment specs using gitRepo volumes will fail. Search manifests and validation rules for references to gitRepo volumes and ensure migration plans are in place.
2. Service.spec.externalIPs is deprecated — Deprecation warnings will appear; full removal is targeted for v1.43. Verify the codebase does not enforce or assume this field is available.
3. kube-controller-manager metric rename — volume_operation_total_errors renamed to volume_operation_errors_total. Update monitoring/alerting if applicable.

Since this is a validation webhook repository, verify that webhook rules and validation logic do not assume these deprecated/removed features are available.

🤖 Prompt for AI Agents

Verify each finding against the current code and only fix it if needed.

In `@go.mod` around lines 19 - 22, The Kubernetes client bump to v0.36.0 may
introduce breaking changes; search and update webhook validation code (e.g., any
ValidateAdmissionReview/ValidatePodSpec/ValidateDeploymentSpec handlers and
related manifest validators) to (1) remove or explicitly reject gitRepo volume
references in Pod/Deployment specs and add migration guidance, (2) stop
enforcing or assuming Service.spec.externalIPs exists in validation logic and
handle its absence gracefully, and (3) update monitoring/alerting and any metric
names referenced in code/config from volume_operation_total_errors to
volume_operation_errors_total; also run tests against v1.36 API types to ensure
type/signature compatibility after the go.mod bump.

[openshift-ci]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: dependabot[bot]
Once this PR has been reviewed and has the lgtm label, please assign feichashao for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[openshift-ci]

@dependabot[bot]: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name	Commit	Details	Required	Rerun command
ci/prow/pr-check	c870654	link	true	/test pr-check
ci/prow/e2e-binary-build-success	c870654	link	true	/test e2e-binary-build-success

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.