Set an upper limit on the urllib3 dependency

[Tenzer]

What type of PR is this?

/kind bug

What this PR does / why we need it:

With urllib3 2.4.0 stricter certificate validity checks were added when running on Python 3.13+: urllib3/urllib3#3571.

This triggers errors such as the following:

[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: Missing Authority Key Identifier

It is however only for users with Kubernetes clusters that have been set up without proper, valid certificates. Notably, this was the case for AWS EKS clusters created with Kubernetes v1.16 and earlier.

Which issue(s) this PR fixes:

Fixes #2394

Special notes for your reviewer:

Does this PR introduce a user-facing change?

NONE

Additional documentation e.g., KEPs (Kubernetes Enhancement Proposals), usage docs, etc.:

[k8s-ci-robot]

Welcome @Tenzer!

It looks like this is your first PR to kubernetes-client/python 🎉. Please refer to our pull request process documentation to help your PR have a smooth ride to approval.

You will be prompted by a bot to use commands during the review process. Do not be afraid to follow the prompts! It is okay to experiment. Here is the bot commands documentation.

You can also check if kubernetes-client/python has its own contribution guidelines.

You may want to refer to our testing guide if you run into trouble with your tests not passing.

If you are having difficulty getting your pull request seen, please follow the recommended escalation practices. Also, for tips and tricks in the contribution process you may want to read the Kubernetes contributor cheat sheet. We want to make sure your contribution gets all the attention it needs!

Thank you, and welcome to Kubernetes. 😃

[Tenzer]

The test failure is courtesy of #2406.

Should I fix it in this PR by fixing the syntax in watch_test.py?

[yliaog]

The test failure is courtesy of #2406.

Should I fix it in this PR by fixing the syntax in watch_test.py?

Yes, please. Thanks.

[roycaihw]

/assign @yliaog

[yliaog]

/retest

[yliaog]

/close

will reopen to trigger the CI

[k8s-ci-robot]

@yliaog: Closed this PR.

In response to this:

/close

will reopen to trigger the CI

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[yliaog]

/open

[yliaog]

/reopen

[k8s-ci-robot]

@yliaog: Reopened this PR.

In response to this:

/reopen

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[yliaog]

@Tenzer do you mind to rebase your PR ? I commented out the problematic test, but if your fix works, could you uncomment it with your fix?

[Tenzer]

I have rebased my PR now. The test_watch_with_deserialize_param test just seems to be stalling when I try to run it locally, so I'm not sure it is working correctly. I have removed my changes to that test so this only deals with the urllib3 dependency.

[yliaog]

/lgtm
/approve

[k8s-ci-robot]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: Tenzer, yliaog

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• OWNERS [yliaog]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment