[WIP] Rebase to Kubernetes 1.35.1#185

Draft

xmudrii wants to merge 65 commits intokcp-dev:kcp-1.35.1-baselinefrom

xmudrii:kcp-1.35.1

Commits on Feb 12, 2026

UPSTREAM: 120920: Revert: Revert: Clean up CRD conversion code structure

authored and
xmudrii
committed
README

sttts
authored and
xmudrii
committed
UPSTREAM: <carry>: controlplane/apiserver: add miniaggregator

sttts
authored and
xmudrii
committed
UPSTREAM: <carry>: clusterize controllers

authored and
xmudrii
committed
UPSTREAM: <carry>: storage: etcd cluster key computation

sttts
authored and
xmudrii
committed
UPSTREAM: <carry>: clusterize serviceaccounts

authored and
xmudrii
committed
UPSTREAM: <carry>: registry/core/serviceaccount: do not crash without pods

sttts
authored and
xmudrii
committed
UPSTREAM: <carry>: INTERESTING: clusterize admission

authored and
xmudrii
committed
UPSTREAM: <carry>: Clusterize ValidatingAdmissionPolicy admission plugin and policy plugin framework

embik
authored and
xmudrii
committed
UPSTREAM: <carry>: clusterize storage hash

sttts
authored and
xmudrii
committed
UPSTREAM: <carry>: endpoints: add Cluster struct for ctx

sttts
authored and
xmudrii
committed
UPSTREAM: <carry>: endpoints/patch: wire openapi for CRD strategic merge patch

sttts
authored and
xmudrii
committed
UPSTREAM: <carry>: storage/etcd3: clusterize

authored and
xmudrii
committed
UPSTREAM: <carry>: apiserver: partial wildcard metadata request accross identities

sttts
authored and
xmudrii
committed
UPSTREAM: <carry>: endpoints: set kcp.io/original-api-version on wildcard partial metadata requests

sttts
authored and
xmudrii
committed
UPSTREAM: <carry>: watch(er/cache): clusterize

authored and
xmudrii
committed
UPSTREAM: <carry>: apiserver: split chain into pre and post authz

sttts
authored and
xmudrii
committed
UPSTREAM: <carry>: apiserver: clusterize listed paths

sttts
authored and
xmudrii
committed
UPSTREAM: <carry>: apiserver: clusterize OpenAPI v2

authored and
xmudrii
committed
UPSTREAM: <carry>: clusterize BuiltInAuthenticationOptions

sttts
authored and
xmudrii
committed
UPSTREAM: <carry>: storage: add UseResourceAsPrefixDefault for legacy storage paths

sttts
authored and
xmudrii
committed
UPSTREAM: <carry>: apiextensions-apiserver

authored and
xmudrii
committed
UPSTREAM: <carry>: cache-server: wire shard name into storage

authored and
xmudrii
committed
UPSTREAM: <carry>: controlplane: wire informers and clients

authored and
xmudrii
committed
UPSTREAM: <carry>: generic cleanup

mjudeikis
authored and
xmudrii
committed
UPSTREAM: <carry>: pass system:admin clients and informers in generic control plane

embik
authored and
xmudrii
committed
UPSTREAM: <carry>: remove REST mapper from admission plugins

embik
authored and
xmudrii
committed
UPSTREAM: <carry>: provide supportedMediaTypes for custom resoure handler patch

embik
authored and
xmudrii
committed
UPSTREAM: <carry>: prevent NPE if no authorization is set

embik
authored and
xmudrii
committed
UPSTREAM: <carry>: wrap CRD group into packagePrefix for OpenAPIV3 builder

embik
authored and
xmudrii
committed
UPSTREAM: <CARRY>: clusterize validatingadmissionpolicystatus controller

embik
authored and
xmudrii
committed
UPSTREAM: <carry>: apiserver cleaning

mjudeikis
authored and
xmudrii
committed
UPSTREAM: <carry>: include cluster name in authz SubjectAccessReview in webhooks

xrstf
authored and
xmudrii
committed
UPSTREAM: <carry>: split auth/authz chains even more

mjudeikis
authored and
xmudrii
committed
UPSTREAM: <carry>: authz: add scoping to default rule resolver

sttts
authored and
xmudrii
committed
UPSTREAM: <carry>: authz: add warrants to default rule resolver

sttts
authored and
xmudrii
committed
UPSTREAM: <carry>: Clusterize MutatingAdmissionPolicy admission plugin and policy plugin framework

gman0
authored and
xmudrii
committed
UPSTREAM: <carry>: Add kube feature gate for global service account

cnvergence
authored and
xmudrii
committed
UPSTREAM: <carry>: Allow pin-dependency to add redirects to local paths

ntnn
authored and
xmudrii
committed
UPSTREAM: <carry>: Drop validation-gen

ntnn
authored and
xmudrii
committed
UPSTREAM: <carry>: Drop merge and replace in x-kubernetes-list/map-type

mjudeikis
authored and
xmudrii
committed
UPSTREAM: <carry>: Keep system:cluster:* groups

ntnn
authored and
xmudrii
committed
UPSTREAM: <carry>: Rename authentication.{kubernetes=>kcp}.io/cluster-name

ntnn
authored and
xmudrii
committed
UPSTREAM: <carry>: Tie global service account test result to feature gate it relies on

ntnn
authored and
xmudrii
committed
UPSTREAM: <carry>: Add authentication.kcp.io/scopes to service accounts

ntnn
authored and
xmudrii
committed
UPSTREAM: <carry>: Add system:cluster:<cluster> group to effective users

ntnn
authored and
xmudrii
committed
UPSTREAM: <carry>: Update pkg/registry/rbac/validation/kcp_test.go

authored and
xmudrii
committed
UPSTREAM: <carry>: Add authorization.kcp.io/cluster-name extra to webhook requests

ntnn
authored and
xmudrii
committed
UPSTREAM: <fixup>: Remove redundant failsafe

ntnn
authored and
xmudrii
committed
UPSTREAM: <carry>: forward current cluster context in TokenReviews

xrstf
authored and
xmudrii
committed
UPSTREAM: <carry>: kube-aggregator

sttts
authored and
xmudrii
committed
CARRY: Disable protoc support

mjudeikis
authored and
xmudrii
committed
UPSTREAM: <carry>: add client and informer hacks

sttts
authored and
xmudrii
committed
UPSTREAM: <carry>: Add kcp patchers

sttts
authored and
xmudrii
committed
UPSTREAM: <carry>: gc & quata patches applied

mjudeikis
authored and
xmudrii
committed
UPSTREAM: <carry>: Clusterize cacher delegator

mjudeikis
authored and
xmudrii
committed
UPSTREAM: <carry>: Use a shared cel environment for fitlerCompiler

ntnn
authored and
xmudrii
committed

Commits on Feb 23, 2026