kubernetes: update to v1.36.1

Cross-branch jump release-1.35 -> release-1.36 + kubernetes-release
bump from v0.15.0-182 to v0.21.1-62 (~1200 commits of tooling churn).

Recipe-side fixups beyond the SRCREV/PV/branch bumps:

  - kubepkg -> krel template path rename: kubernetes-release reorganized
    its templates tree, dropping 'kubepkg' in favor of 'krel' (the
    release tool), with a flatter layout that no longer wraps the unit
    files under deb/<pkg>/lib/systemd/system/. Updated do_install paths:
      cmd/kubepkg/templates/latest/deb/kubelet/lib/systemd/system/kubelet.service
        -> cmd/krel/templates/latest/kubelet/kubelet.service
      cmd/kubepkg/templates/latest/deb/kubeadm/10-kubeadm.conf
        -> cmd/krel/templates/latest/kubeadm/10-kubeadm.conf

  - Dual-class fixups: SRCREV_kubernetes:class-devupstream and
    SRCREV_kubernetes-release:class-devupstream synced to the same
    values as their non-class variants; PV:class-devupstream and
    CVE_VERSION bumped to 1.36.1.

  - SRC_URI branch=release-1.35 -> release-1.36 in both the regular
    and class-devupstream SRC_URI definitions.

Bumping kubernetes to version v1.36.1-1-g102c4a4f87b, which comprises the following commits:

    102c4a4f87b Update CHANGELOG/CHANGELOG-1.36.md for v1.36.1
    756939600b9 Release commit for Kubernetes v1.36.1
    b0b25e8ade2 kubeadm: use dedicated ClusterRole for apiserver kubelet client
    2bd86062e71 KEP-5304: DecodeMetadataFromStream only skips metadata entries with unknown API versions
    b643483ccc4 DRA: merge same request metadata across drivers
    f0d0ff95d29 kubeadm: skip LocalAPIEndpoint defaulting on worker join
    100bf5d4997 kubeadm: use the localAPIEndpoint for all API calls in 'init'
    0008353cef2 kube-proxy: don't do full periodic syncs on large cluster mode
    a45cef81d62 Delete remote endpoint if it has same ip as local endpoint in the system.
    cbb38cd5ce6 Delete remote endpoint if it has same ip as local endpoint in the system.
    28dd6f27570 hack/update-vendor.sh
    529473cc4d8 register zfs cadvisor plugin
    07144e39cd5 Add a (*Client) addEndpoint method
    98ecfc63fe4 Evaluate etcd cluster health using quorum
    891a905031b test/localupcluster: stop all components before starting replacements
    1d850e84279 localupcluster: set readiness polling interval to 1 second
    62d05adc8b7 localupcluster: properly query /readyz and /healthz
    745e271a9cb Update CHANGELOG/CHANGELOG-1.36.md for v1.36.0
    b2ba48e510e Escape path inside the container

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>

kubernetes-release: update to v0.21.1

Bumping release to version v0.21.1-62-g9e3980c6, which comprises the following commits:

    8995cc83 schedule-builder: optionally extend upcoming patch window to 4 during maintenance overlap
    8669ec6c Bump github/codeql-action from 4.35.5 to 4.36.0 in the actions group
    339db283 Rebuild debian-base - bump to bookworm-v1.0.8
    0765cb64 Bump the actions group with 2 updates
    6122139a Bump goreleaser/goreleaser-action in the actions group
    2179f52e Bump the all group with 2 updates
    55ea775c Bump github/codeql-action from 4.35.4 to 4.35.5 in the actions group
    cf066d08 Bump step-security/harden-runner in the actions group
    44d84ebf Bump step-security/harden-runner in the actions group
    59d5e645 Bump k8s.io/apimachinery from 0.36.0 to 0.36.1 in the all group
    3c81fd5a Bump distroless-iptables to use Go 1.26.3/1.25.10
    0e27de90 Bump golang.org/x/text from 0.36.0 to 0.37.0
    6e06dc1b Bump github/codeql-action from 4.35.3 to 4.35.4 in the actions group
    25fa597b build kube-cross, go-runner, releng-ci with golang 1.26.3/1.25.10
    5dd07a6d Bump sigstore/cosign-installer from 4.1.1 to 4.1.2 in the actions group
    0faf54f5 Bump github.com/go-git/go-git/v5 from 5.18.0 to 5.19.0
    02f113d3 Bump github.com/in-toto/in-toto-golang from 0.10.0 to 0.11.0
    c484b887 Bump sigs.k8s.io/promo-tools/v4 from 4.4.1 to 4.5.0
    c808377a Bump the actions group with 2 updates
    ae1d58f5 Bump github.com/mattn/go-isatty from 0.0.21 to 0.0.22 in the all group
    c271b925 Bump goreleaser/goreleaser-action in the actions group
    b0b65a11 krel: add validation for mutliple matching constraints
    0ffd6e1f krel/templates: adjust kubeadm constraint for >= 1.30
    73e308ec Bump k8s.io/apimachinery from 0.35.4 to 0.36.0
    c3e4f32c Bump step-security/harden-runner in the actions group
    011afb52 Bump goreleaser/goreleaser-action in the actions group
    fa5f1f21 Bump github.com/go-git/go-git/v5 from 5.17.2 to 5.18.0
    6c97c5f3 Bump k8s.io/apimachinery from 0.35.3 to 0.35.4 in the all group
    cb1ab9d3 Bump the actions group with 2 updates
    9d4d0461 Revert "Use blobless clone for fresh k/k checkouts during stage"
    510d5c43 Bump softprops/action-gh-release from 2.6.1 to 3.0.0
    d63d0e1c Bump github.com/sigstore/timestamp-authority/v2 from 2.0.3 to 2.0.6
    aa1e2491 Bump the actions group across 1 directory with 2 updates
    e87cfe89 Bump github.com/google/go-containerregistry in the all group
    2dbfe754 Bump golang.org/x/text from 0.35.0 to 0.36.0
    c7525c60 Update the Go update issue template
    5dd48ced Update k8s-cloud-builder and k8s-ci-builder to Go 1.26.2/1.25.9
    caece2b1 Bump distroless-iptables to use Go 1.26.2/1.25.9
    cfb2c5d3 build kube-cross, go-runner, releng-ci with golang 1.26.2/1.25.9
    7c69784f Bump github.com/mattn/go-isatty from 0.0.20 to 0.0.21 in the all group
    a3330e4f Bump go.opentelemetry.io/otel/sdk from 1.42.0 to 1.43.0
    eb1d1573 Bump kubernetes-sigs/release-actions in the actions group
    6aab20a9 Bump github.com/google/go-containerregistry in the all group
    c470ce19 Bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4
    743d177d Bump github.com/maxbrunsfeld/counterfeiter/v6 in the all group
    9fc828ff Fix schedule-builder test data with stray tab character
    2625de37 Bump the all group with 2 updates
    b36425fe Add go1.25 variants for release-1.33 and release-1.34
    01cfe00a Bump the actions group across 1 directory with 3 updates
    ae079fd1 Switch cosign signing to new bundle format
    58b1dc51 Bump sigs.k8s.io/promo-tools/v4 from 4.4.0 to 4.4.1 in the all group
    38d62704 Fix release-notes -s crash on repos with parentless root commits
    03674e04 Bump github/codeql-action from 4.34.1 to 4.35.1 in the actions group
    360db206 Bump github.com/go-git/go-git/v5 from 5.17.0 to 5.17.1 in the all group
    f829acb4 Bump sigstore/cosign-installer from 4.1.0 to 4.1.1 in the actions group
    44c0863d Add tests for obs/archive file
    c56c8d60 docs: clarify krel install locations + go install
    fe02c4c3 Wrap dependency subsection in dropdown

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>

1 files changed, 14 insertions, 11 deletions

diff --git a/recipes-containers/kubernetes/kubernetes_git.bb b/recipes-containers/kubernetes/kubernetes_git.bb
index 03243605..ab0ea780 100644
--- a/recipes-containers/kubernetes/kubernetes_git.bb
+++ b/recipes-containers/kubernetes/kubernetes_git.bb
@@ -5,25 +5,25 @@ applications across multiple hosts, providing basic mechanisms for deployment, \
 maintenance, and scaling of applications. \
 "
 
-PV = "1.35.2+git"
-CVE_VERSION = "1.35.2"
-SRCREV_kubernetes = "b6f632ba56e937dad484d5ac99d5ff51e7073dfe"
-SRCREV_kubernetes-release = "21382abdbfa8e6a43fd417306fa649cb651cc06e"
+PV = "1.36.1+git"
+CVE_VERSION = "1.36.1"
+SRCREV_kubernetes = "102c4a4f87ba0a26c4a4f1dd8d1d3d07c83697e5"
+SRCREV_kubernetes-release = "9e3980c6c7b5da3ec3efa0e8b3bdc77ab50c7a0c"
 PE = "1"
 
 BBCLASSEXTEND = "devupstream:target"
 LIC_FILES_CHKSUM:class-devupstream = "file://LICENSE;md5=3b83ef96387f14655fc854ddc3c6bd57"
 DEFAULT_PREFERENCE:class-devupstream = "-1"
-SRC_URI:class-devupstream = "git://github.com/kubernetes/kubernetes.git;branch=release-1.35;name=kubernetes;protocol=https \
+SRC_URI:class-devupstream = "git://github.com/kubernetes/kubernetes.git;branch=release-1.36;name=kubernetes;protocol=https \
                              git://github.com/kubernetes/release;branch=master;name=kubernetes-release;destsuffix=${BB_GIT_DEFAULT_DESTSUFFIX}/release;protocol=https \
                             "
-SRCREV_kubernetes:class-devupstream = "b6f632ba56e937dad484d5ac99d5ff51e7073dfe"
-SRCREV_kubernetes-release:class-devupstream = "21382abdbfa8e6a43fd417306fa649cb651cc06e"
-PV:class-devupstream = "1.35.2+git${SRCREV_kubernetes}"
+SRCREV_kubernetes:class-devupstream = "102c4a4f87ba0a26c4a4f1dd8d1d3d07c83697e5"
+SRCREV_kubernetes-release:class-devupstream = "9e3980c6c7b5da3ec3efa0e8b3bdc77ab50c7a0c"
+PV:class-devupstream = "1.36.1+git${SRCREV_kubernetes}"
 
 SRCREV_FORMAT ?= "kubernetes_release"
 
-SRC_URI = "git://github.com/kubernetes/kubernetes.git;branch=release-1.35;name=kubernetes;protocol=https;destsuffix=${BB_GIT_DEFAULT_DESTSUFFIX}/src/github.com/kubernetes/kubernetes \
+SRC_URI = "git://github.com/kubernetes/kubernetes.git;branch=release-1.36;name=kubernetes;protocol=https;destsuffix=${BB_GIT_DEFAULT_DESTSUFFIX}/src/github.com/kubernetes/kubernetes \
            git://github.com/kubernetes/release;branch=master;name=kubernetes-release;destsuffix=${BB_GIT_DEFAULT_DESTSUFFIX}/release;protocol=https"
 
 SRC_URI:append = " \
@@ -110,8 +110,11 @@ do_install() {
 
     install -m 755 -D ${S}/_output/local/bin/${TARGET_GOOS}/${TARGET_GOARCH}/* ${D}/${bindir}
 
-    install -m 0644 ${UNPACKDIR}/${BB_GIT_DEFAULT_DESTSUFFIX}/release/cmd/kubepkg/templates/latest/deb/kubelet/lib/systemd/system/kubelet.service ${D}${systemd_unitdir}/system/
-    install -m 0644 ${UNPACKDIR}/${BB_GIT_DEFAULT_DESTSUFFIX}/release/cmd/kubepkg/templates/latest/deb/kubeadm/10-kubeadm.conf  ${D}${systemd_unitdir}/system/kubelet.service.d/
+    # NOTE: kubernetes-release reorganized the templates tree: 'kubepkg' was
+    # removed and 'krel' (the release tool) holds the templates now, in a
+    # flatter layout without the deb/<pkg>/lib/systemd/system/ wrapping.
+    install -m 0644 ${UNPACKDIR}/${BB_GIT_DEFAULT_DESTSUFFIX}/release/cmd/krel/templates/latest/kubelet/kubelet.service ${D}${systemd_unitdir}/system/
+    install -m 0644 ${UNPACKDIR}/${BB_GIT_DEFAULT_DESTSUFFIX}/release/cmd/krel/templates/latest/kubeadm/10-kubeadm.conf ${D}${systemd_unitdir}/system/kubelet.service.d/
 
     if ${@bb.utils.contains('DISTRO_FEATURES','systemd','true','false',d)}; then
         install -d "${D}${BIN_PREFIX}${base_bindir}"