fix(deps): update rust crate kube to 0.99.0

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
kube	dependencies	minor	0.69.0 -> 0.99.0

---

Release Notes

kube-rs/kube (kube)

v0.99.0

Compare Source

===================

Highlights

Dependency Cleanups

• backoff (unmaintained) replaced with backon in #​1653
  • No change if you are using default_backoff natively, or through Controller.
  • Parameters configurable via ExponentialBackoff from backon::ExponentialBuilder into WatchStreamExt::backoff
• json-patch bumped and uses re-exported jsonptr for less version clashes #​1718
• rand dependency no longer explicit as only rng is under ws feature via tungstenite's client::generate_key #​1691
• ring (still maintained) now optional for rustls-tls feature (for alternate aws-lc-rs) #​1717

Features

• Support for the v5.channel.k8s.io streaming ws protocol to allow closing streams properly (kubernetes.io blog) #​1693
• CustomResource derive; typed attributes for #[kube(scale)] and #[kube(deprecated)] in #​1656 + #​1697
• Client::with_valid_until to handle short lived local client certs #​1707
• New common conditions that can be awaited #​1710

What's Changed

Added

• Add typed scale argument to derive macro by @​Techassi in #​1656
• Add deprecated argument to derive macro by @​Techassi in #​1697
• Add Api::get_metadata_opt_with by @​sebsoto in #​1708
• Add common wait conditions for Deployments, LoadBalancer Services, and Ingress by @​detjensrobert in #​1710
• Add Client::with_valid_until for client cert expiry by @​goenning in #​1707
• kube-runtime: make ExponentialBackoff public by @​gdeleon2 in #​1716

Changed

• Replace backoff with backon by @​flavio in #​1653
• Bump rand to 0.9 by @​clux in #​1686
• Remove rand dependency in favor of tungstenite fn by @​clux in #​1691
• Exec can return stdout data even after stdin is closed. by @​esw-amzn in #​1693
• Bump json-patch to 4 use bundled jsonptr to 0.7 by @​clux in #​1718
• Allow removing hyper-rustls/ring feature by @​eliad-wiz in #​1717

Fixed

• kube-runtime: fix exponential backoff max times by @​eliad-wiz in #​1713
• CustomResource derive; allow status attribute to take a path by @​clux in #​1704

v0.98.0

Compare Source

===================

Highlights

• Kubernetes v1_32 support via k8s-openapi 0.24
  • Please upgrade k8s-openapi along with kube to avoid conflicts.
  • New minimum versions: MSRV 1.81.0, MK8SV: 1.28
• kube-derive additions:
  • A CELSchema derive macro wrapper around JsonSchema for injecting cel validations into the schema #​1649
  • Allow overriding served and storage booleans for multiple versions of CustomResource derives: #​1644
• kube-runtime event Recorder now aggregates repeat events #​1655 (some breaking changes, see controller-rs#116)
• kube-client UTF-16 edge case handling for windows #​1654

What's Changed

Added

• Add storage and served argument to derive macro by @​Techassi in #​1644
• Implement derive(CELSchema) macro for generating cel validation on CRDs by @​Danil-Grigorev in #​1649

Changed

• Add series implementation for runtime event recorder by @​pando85 in #​1655
• Bump k8s-openapi for Kubernetes v1_32 support and MSRV by @​clux in #​1671
• Update tokio-tungstenite requirement from 0.24.0 to 0.25.0 by @​dependabot in #​1666

Fixed

• Add support for UTF-16 encoded kubeconfig files by @​goenning in #​1654

v0.97.0

Compare Source

===================

Highlights

• CustomResource derive added features for crd yaml output:
  • selectable fields #​1605 + #​1610
  • annotations and labels #​1631
• Configuration edge cases:
  • Avoid double installations of aws-lc-rs (rustls crypto) provider #​1617
  • Kubeconfig fix for null user; #​1608
  • Default runtime watcher backoff alignment with client-go #​1603
• Feature use:
  • Client proxy feature-set misuse prevention #​1626
  • Allow disabling gzip via Config #​1627
• Depedency minors: thiserror, hashbrown, jsonptr, json-patch. Killed lazy_static / once_cell

What's Changed

Added

• Feature: Allow to pass selectableFields for CRD definition by @​Danil-Grigorev in #​1605
• add support for CRD annotations and labels in kube-derive by @​verokarhu in #​1631
• Feature: Add config setting to disable gzip compression #​1627 by @​markdingram in #​1628

Changed

• upgrade to hashbrown 0.15.0 by @​rorosen in #​1599
• update jsonptr + json-patch by @​aviramha in #​1600

Fixed

• fix(kube-runtime): setup backoff with builder pattern by @​tiagolobocastro in #​1603
• allow null user in kubeconfig's context by @​aviramha in #​1608
• Gauge SelectableField by k8s 1.30 version by @​Danil-Grigorev in #​1610
• Add a compile_error if setting selectable fields on K8s < 1.30 by @​clux in #​1612
• conditionally install aws-lc-rs by @​goenning in #​1617
• Warn when trying to use an unsupported proxy protocol by @​nightkr in #​1626

v0.96.0

Compare Source

===================

Highlights

• Features: webpki-roots added #​1323, and predicates no longer require unstable-runtime #​1578
• Local auth: improve leniency/kubectl-alignment #​1595, remove http proxy vars #​1520
• Dependencies: upgrades to tower and secrecy, and derivative swapped for educe

What's Changed

Added

• rustls: optionally use WebPKI roots to avoid panicking on Android & iOS by @​ewilken in #​1323
• Stabilise runtime predicates by @​clux in #​1578
• Add ObjectRef::from as alias for ::from_obj by @​nightkr in #​1598

Changed

• Bump secrecy to 0.10 by @​clux in #​1588
• Upgrades tower to 0.5.1 by @​markdingram in #​1589
• runtime: rename references from Flatten to Decode by @​clux in #​1520

Removed

• remove using HTTP PROXY from environment variable by @​aviramha in #​1587

Fixed

• replace derivative dependency with educe by @​rorosen in #​1585
• change auth behavior to match upstream on unknown/empty user - use null auth by @​aviramha in #​1595

v0.95.0

Compare Source

===================

Kubernetes v1_31 support via k8s-openapi 0.23

Please upgrade k8s-openapi along with kube to avoid conflicts.

New minimum versions: MSRV 1.77.2, MK8SV: 1.26

What's Changed

Changed

• Update tokio-tungstenite requirement from 0.23.0 to 0.24.0 by @​dependabot in #​1579
• Bump k8s-openapi to 0.23 for Kubernetes 1.31 support by @​clux in #​1581

v0.94.2

Compare Source

What's Changed

Fixes a runtime regression in watch_object.

Fixed

• Ensure watch_object handles objects removed before init by @​markdingram in #​1577

New Contributors

• @​markdingram made their first contribution in #​1577

Full Changelog: kube-rs/kube@0.94.1...0.94.2

v0.94.1

Compare Source

===================

What's Changed

Convenience release. Adjusted a version bound to avoid possibility of running into version compatibility errors with hyper-rustls.

Fixed

• Update hyper-rustls minimum version by @​divergentdave in #​1575

v0.94.0

Compare Source

===================

Highlights

Support for rustls's aws-lc-rs is available under a new kube/aws-lc-rs feature. Via #​1568 for #​1562

Furthermore, there are improvements to partial typing:

1. Added a DeserializeGuard safety wrapper to lift deserialisation errors (to e.g. not break watchers). See the errorbound example and core module module. Wrapped type be used with e.g. Api::<DeserializeGuard<CaConfigMap>>. Via #​1556
2. A derive macro for Resource; #[derive(Resource)] allows inheriting existing k8s-openapi resource implementations to avoid stepping down to the dynamic api. See the cert check example for usage. Via #​1565

What's Changed

Added

• Add error boundary wrapper type by @​nightkr in #​1556
• Implement Error for error_boundary::InvalidObject by @​nightkr in #​1558
• Add finalizers predicate filter by @​ivan-kiselev in #​1560
• optional feature to use aws-lc-rs rustls feature by @​mcluseau in #​1568
• Add Resource derive macro by @​Danil-Grigorev in #​1565

Changed

• Make implicitly dependent feature explicitly depend on each other by @​clux in #​1551

v0.93.1

Compare Source

===================

What's Changed

Fixed

• add missing feature gate on ConfigExt for no-features build by @​HoKim98 in #​1549

v0.93.0

Compare Source

===================

Highlights

Better query validation, better client header customisation, and two new modules:

1. core::labels module for creating typed label selectors for ListParams or WatchParams. Can be constructed from a native LabelSelector, or directly from a Selector of Expressions. PR.
2. prelude to simplify imports of extension traits. PR.

A big thank you to everyone who contributed to this release!

What's Changed

Added

• add option to provide headers to send as client by @​aviramha in #​1523
• Add prelude for blanket and extension traits across sub-crates by @​Danil-Grigorev in #​1527
• Label selector support by @​Danil-Grigorev in #​1539

Changed

• Update garde requirement from 0.19.0 to 0.20.0 by @​dependabot in #​1535

Removed

• runtime: remove deprecated default_backoff by @​clux in #​1518

Fixed

• Fix watcher not fully paginating on Init by @​clux in #​1525 (ported to 0.92.1)
• Prevent empty string object name requests from being sent to the apiserver by @​xMAC94x in #​1541

v0.92.1

Compare Source

===================

Highlights

Better query validation, better client header customisation, and two new modules:

1. core::labels module for creating typed label selectors for ListParams or WatchParams. Can be constructed from a native LabelSelector, or directly from a Selector of Expressions. PR.
2. prelude to simplify imports of extension traits. PR.

A big thank you to everyone who contributed to this release!

What's Changed

Added

• add option to provide headers to send as client by @​aviramha in #​1523
• Add prelude for blanket and extension traits across sub-crates by @​Danil-Grigorev in #​1527
• Label selector support by @​Danil-Grigorev in #​1539

Changed

• Update garde requirement from 0.19.0 to 0.20.0 by @​dependabot in #​1535

Removed

• runtime: remove deprecated default_backoff by @​clux in #​1518

Fixed

• Fix watcher not fully paginating on Init by @​clux in #​1525 (ported to 0.92.1)
• Prevent empty string object name requests from being sent to the apiserver by @​xMAC94x in #​1541

v0.92.0

Compare Source

===================

Bugfix Release

This release fixes #​1524; a regression from 0.92.0 causing watcher to skip pages on initial list. See #​1525.

It is recommended to upgrade from 0.92.0.

What's Changed

Fixed

• Fix watcher not fully paginating on Init by @​clux in #​1525

v0.91.0

Compare Source

===================

Kubernetes v1_30 support via k8s-openapi 0.22

Please upgrade k8s-openapi along with kube to avoid conflicts.

Unstable Stream Sharing

A more complete implementation that allows sharing watcher streams between multiple Controllers (for #​1080) has been added under the unstable-runtime feature-flag in #​1449 and #​1483 by @​mateiidavid. This represents the first usable implementation of shared streams (and replaces the older prototype part in #​1470). While some changes are expected, you can check the shared_stream_controller example for a high-level overview.

What's Changed

Added

• Add shared stream interfaces by @​mateiidavid in #​1449
• Allow to create non-controller owner reference for resource by @​Danil-Grigorev in #​1475
• feat(runtime): support for owned shared streams by @​mateiidavid in #​1483

Changed

• Upgrade k8s-openapi to 0.22 and bump MK8SV to 1.25 by @​clux in #​1485

Removed

• Remove abandoned StreamSubscribe implementation by @​clux in #​1470

Fixed

• Include inner error message in Display for SerdeError by @​XAMPPRocky in #​1481
• Remove invalid uniqueItems property from CRDs when Sets are used by @​sbernauer in #​1484

v0.90.0

Compare Source

===================

Highlights

kube::client::Body Improvements

• Unit testing helpers #​1444 + #​1445,
• Accuracy; size_hint and is_end_stream implemented in #​1452 + internal cleanups #​1453 and #​1455

Dependency Cleanups

• rustls to 0.23 in #​1457
• once_cell removed in #​1447 (no longer needed)
• futures feature prune in #​1442
• chrono features prune in #​1448, and bump its min version pin in #​1458

What's Changed

Added

• Add proxy Body::collect_bytes for easier unit tests by @​clux in #​1445

Changed

• update to rustls 0.23 by @​tottoto in #​1457

Fixed

• disable unused futures feature by @​tottoto in #​1442
• Expose Body::empty for easier tests by @​clux in #​1444
• replace once_cell Lazy with ordinary static by @​tottoto in #​1447
• replace chrono feature clock with now by @​tottoto in #​1448
• implement http_body trait method by @​tottoto in #​1452
• Fix examples for custom clients not authenticating by @​clux in #​1450
• Set a compatible minimum chrono version by @​clux in #​1458

v0.89.0

Compare Source

Upgrading hyper and http to 1.0 and MSRV to 1.75.0

This release completes the hyper & http ecosystem upgrade #​1351 via #​1438. In particular, this change includes upgrades to http, http-body, tower-http, hyper, hyper-openssl, hyper-rustls, hyper-socks2, hyper-timeout, tame-oauth, tokio-tungstenite, tower-http, rustls, rustls-pemfile, as well as adopting the new hyper_util and http_body_util to make the change.

While this change constitutes significant internal churn (and a new kube::client::Body), our external api remains largely unchanged. Some minor changes are necessary for custom clients, and for integration testing using tower_mock. See the controller-rs upgrade pr or the examples folder in this commit for details.

What's Changed

Added

• client_ext for Client::get and Client::list by @​clux in #​1375
• direct node access logs/portforward/exec/attach via kubelet debug interface by @​XciD in #​1428

Changed

• Bump MSRV to 1.75.0 by @​clux in #​1408
• Ease the bound for reflector to only request identifying metadata by @​SOF3 in #​1393
• Update base64 requirement from 0.21.4 to 0.22.0 by @​dependabot in #​1422
• upgrade jsonpath-rust to 0.5.0 by @​clux in #​1429
• update to hyper 1 by @​tottoto in #​1438

Fixed

• Serialize TerminalSize fields as PascalCase by @​nightkr in #​1407
• Kubeconfig allow certificate_authority_data not present in ExecAuthCluster by @​ljun20160606 in #​1432
• fix: check err on Client::request_stream by @​XciD in #​1433

New Contributors

• @​SOF3 made their first contribution in #​1393
• @​ljun20160606 made their first contribution in #​1432
• @​XciD made their first contribution in #​1433
• @​tottoto made their first contribution in #​1438

Full Changelog: kube-rs/kube@0.88.1...0.89.0

v0.88.1

Compare Source

===================

What's Changed

This is a bug fix release for a deserialization issue introduced in 0.88.0.

Fixed

• Minor fixes to ObjectList by @​flavio in #​1398

v0.88.0

Compare Source

===================

Kubernetes v1_29 support via k8s-openapi 0.21

Please upgrade k8s-openapi along with kube to avoid conflicts.

What's Changed

Added

• Add type meta data for list types by @​Danil-Grigorev in #​1380

Changed

• Bump MSRV to 1.70 by @​clux in #​1384
• Upgrade k8s-openapi for Kubernetes v1_29 support by @​clux in #​1394

v0.87.2

Compare Source

===================

What's Changed

Added

• Add support for LogParams::since_time by @​clux in #​1342
• Provide cluster info to exec plugins by @​aviramha in #​1331
• Allow setting a description on a derived CRD by @​sbernauer in #​1359

Changed

• Bump MSRV from 1.64 to 1.65 by @​clux in #​1353
• Switch from jsonpath_lib to jsonpath-rust by @​ilya-bobyr in #​1345

v0.87.1

Compare Source

===================

Headlines

• fixed a Controller issue with reconciliation requests disappearing when using concurrency #​1324
• improved Client with better exec auth behaviour #​1320, timeout control #​1314, and socks5 proxy handling #​1311
• small changes to an unstable streams feature #​1304, and a a derive property that is now illegal with syn 2 #​1307

Big thanks to everyone involved 🎃

What's Changed

Added

• Feature-flagged support for socks5 proxy in Client by @​Razz4780 in #​1311
• Add example for raw API Server requests by @​mateiidavid in #​1330

Changed

• Document Controller::reconcile_on and remove Err input requirement by @​clux in #​1304
• Bump base64 to 0.21 by @​clux in #​1308
• Upgrade darling and syn and rename #[kube(struct)] by @​clux in #​1307

Fixed

• Fixed KUBERNETES_EXEC_INFO environment variable passed to auth plugins by @​Razz4780 in #​1320
• Fix Controller: pending messages are stuck in the scheduled map by @​co42 in #​1324
• Set a default write timeout by @​alex-hunt-materialize in #​1314

v0.86.0

Compare Source

Headlines

k8s-openapi 0.20 for Kubernetes v1_28

Please note upstream api removals.
As usual, upgrade k8s-openapi along with kube to avoid issues.

Default TLS stack changed to rustls

With last year's upstream changes from rustls (closing all our existing rustls issues - see #​1192), this is now the better choice for security, features, and ease of building. The previous default openssl stack can still be used with default-features = false plus the openssl-tls feature.

Controller Configuration

A controller Config has been added to allow tweaking two behaviour parameters (debouncing in #​1265 and concurrency limits in #​1277) of the Controller. Huge thanks to @​aryan9600 for his work.

Streaming Lists

The sendInitialEvents alpha feature is now supported, and is quickly testable in the pod_watcher example when using the feature gate. This will help optimise the memory profile of controllers when the feature becomes generally available. Amazing work by first time contributor @​casualjim.

What's Changed

Added

• add controller::Config and debounce period to scheduler by @​aryan9600 in #​1265
• adds watch-list implementation without breaking changes by @​casualjim in #​1255
• allow configuring controller's concurrency by @​aryan9600 in #​1277

Changed

• Change default TLS stack to rustls-tls by @​clux in #​1261
• Bump k8s-openapi to 0.20.0 by @​clux in #​1291

Fixed

• core: omit invalid resource version parameters when doing paged requests by @​goenning in #​1281

New Contributors

• @​casualjim made their first contribution in #​1255
• @​ymgyt made their first contribution in #​1290

Full Changelog: kube-rs/kube@0.85.0...0.86.0

v0.85.0

Compare Source

===================

What's Changed

Added

• Add WatchStreamExt::reflect to allow chaining on a reflector by @​clux in #​1252
• Implement ephemeral containers subresource by @​jmintb in #​1153

Changed

• Swap dirs-next dependency to cargo-team maintained home crate by @​utkarshgupta137 in #​1207
• Upgrade k8s-openapi to 0.19.0 for v1_27 support by @​clux in #​1271

Fixed

• watcher: return NoResourceVersion error if resource version is empty by @​aryan9600 in #​1259
• Update the scheduler message when preponing by @​nightkr in #​1260

v0.84.0

Compare Source

===================

Highlights

Stream Improvements

On the runtime side, the Controller now delays reconciles until the main Store is ready (via a new Store helper from #​1243). The stream selection for owned resources is more efficient (#​1240), and the underlying watcher streams now all paginate (#​1249). There are also many new WatchStreamExt helpers ( #​1246 + #​1228 + #​1232) as a continued work towards the more customisable streams-api (#​1080).

On the client-side; streaming logs are now easier to deal with as an AsyncBufRead #​1235.

OIDC Refresh

Optional OIDC refreshable token support was introduced in #​1229 under kube/oidc for out-of-cluster Client configuration. Previously, refresh support was limited to non-OIDC tokens from the GcpOuth provider (kube/oauth) or through arbitrary exec calls / TokenFile loading.

What's Changed

Added

• Add Predicate trait to allow combination + fallbacks by @​clux in #​1228
• Added refreshing OIDC ID token as an optional feature by @​Razz4780 in #​1229
• Add WatchStreamExt::default_backoff shorthand by @​clux in #​1232
• Derive PartialEq on core params structs by @​danrspencer in #​1237
• Track store readiness by @​nightkr in #​1243
• Add WatchStreamExt::modify() to modify events by @​aryan9600 in #​1246
• Add default pagination to watcher by @​clux in #​1249

Changed

• Bump MSRV from 1.63 to 1.64 by @​clux in #​1233
• Change Api::log_stream to return AsyncBufRead by @​aryan9600 in #​1235

Fixed

• Make Controller::owns use metadata_watcher internally by @​clux in #​1240

v0.83.0

Compare Source

===================

What's Changed

Added

• Add Controller::reconcile_on by @​co42 in #​1163
• Add predicates::resource_version by @​clux in #​1221
• add Duration to kube-core by @​hawkw in #​1224

Changed

• Introduce GetParams support by @​mateiidavid in #​1214

Fixed

• Swap validator for garde by @​mateiidavid in #​1212
• fix: #[kube(crates(serde = "some_crate::serde"))] was not working by @​chubei in #​1215

v0.82.2

Compare Source

===================

Watcher Fixes

Two fixes to allow watcher::Config to function as intended.

What's Changed

Fixed

• runtime::watcher: only set rv if semantic is any by @​goenning in #​1204
• watcher::Config: Derive Clone + Debug + PartialEq by @​clux in #​1206

v0.82.1

Compare Source

Bugfix Release

nullable is re-instated on Option types from CustomResource generated schemas, due to unintended errors removing it caused on Api::patch calls on None members that were not setting #[serde(skip_serializing_if = "Option::is_none")]. This only affected 0.81 and 0.82 from last week, and does not require user action regardless of where you are upgrading from.

This release also fixes a metadata_watcher triggering deserialization error from doing Api::list_metadata on an empty set.

What's Changed

Fixed

• Fix WatchParams bookmarks for watch_metadata by @​clux in #​1193
• Fix ObjectList not deserializing items: null by @​suryapandian in #​1199
• Revert "kube-derive: Disable option_nullable for CRD generation" by @​Dav1dde in #​1201

New Contributors

• @​krisnova made their first contribution in #​1198

Full Changelog: kube-rs/kube@0.82.0...0.82.1

v0.82.0

Compare Source

===================

Dependency Updates

This release brings in the new k8s-openapi release.
Be sure to upgrade k8s-openapi and kube simultaneously to avoid multiple version errors:

cargo upgrade -p k8s-openapi -p kube -i

What's Changed

Changed

• Bump serde_yaml to 0.9 by @​clux in #​1188
• Bump k8s-openapi to 0.18.0 by @​clux in #​1190

v0.81.0

Compare Source

Highlights

List/Watch Changes

One big change is the splitting of ListParams into ListParams and WatchParams in #​1162 and #​1171. If you were using api.list directly, this should not affect you, but api.watch calls will need a replace of ListParams to WatchParams. Apart from the resulting field splitting, the two structs still have a mostly compatible api.

If you were passing

---

Configuration

📅 Schedule: Branch creation - "after 9pm,before 6am" in timezone Europe/Zurich, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: Cargo.lock

Command failed: cargo update --config net.git-fetch-with-cli=true --manifest-path Cargo.toml --package kube@0.69.0 --precise 0.99.0
error: failed to acquire package cache lock

Caused by:
  failed to open: /home/ubuntu/.cargo/.package-cache

Caused by:
  failed to create directory `/home/ubuntu/.cargo`

Caused by:
  File exists (os error 17)