fix(py3-kubernetes): cherry-pick v36 incluster auth fix + regression test

v36.0.0 rewrote Configuration.auth_settings() to look up the bearer
credential under api_key['BearerToken'], but left the hand-written
loaders in kubernetes/base/config/ and kubernetes_asyncio/config/
writing api_key['authorization']. Net effect: every load_incluster_config()
on v36 produces a Configuration with no bearer credential, requests go
out unauthenticated, and the apiserver rejects them as system:anonymous.

Cherry-pick the two upstream commits from PR #2585 to write 'BearerToken'
in all three loaders, and bump epoch to 1. Drop the cherry-picks once a
v36.0.1 upstream release ships with the fix applied.

Also add a subpackage test that drives InClusterConfigLoader._set_config
and asserts api_key['BearerToken'] is populated, so the fix can't be
silently dropped on a future bump.

Refs:
- Upstream PR:    kubernetes-client/python#2585
- Upstream issue: kubernetes-client/python#2591

Signed-off-by: Francesco Bartolini <francesco.bartolini@chainguard.dev>


Export:  6f0eda5c49c32b1ea5cb945c2c36e44ec0c20d35

Author: efbar

py3-kubernetes.yaml

@@ -1,7 +1,7 @@
 package:
   name: py3-kubernetes
   version: "36.0.0"
-  epoch: 0
+  epoch: 1
   description: Kubernetes python client
   copyright:
     - license: Apache-2.0
@@ -40,6 +40,9 @@ pipeline:
       repository: https://github.com/kubernetes-client/python
       tag: v${{package.version}}
       expected-commit: 97290c49c18ca84c831068ddb887092353719b3f
+      cherry-picks: |
+        master/c3608a4c2b1f046f6ffd8effeca4cafeead70d5b: config write api_key BearerToken so v36+ SDK auth works
+        master/7cc2c579516839d373065f1ec7d19dcc692360f6: config drop dual-write replace authorization with BearerToken
 
 subpackages:
   - range: py-versions
@@ -74,6 +77,23 @@ subpackages:
           with:
             python: python${{range.key}}
             import: ${{vars.pypi-package}}
+        - name: incluster loader sets BearerToken api_key
+          runs: |
+            python${{range.key}} - <<'PY'
+            from kubernetes.client import Configuration
+            from kubernetes.config.incluster_config import InClusterConfigLoader
+
+            loader = InClusterConfigLoader.__new__(InClusterConfigLoader)
+            loader.host = "https://test.invalid"
+            loader.token = "test-token"
+            loader.ssl_ca_cert = None
+            loader._try_refresh_token = False
+
+            cfg = Configuration()
+            loader._set_config(cfg)
+
+            assert cfg.api_key.get("BearerToken") == "test-token", cfg.api_key
+            PY
 
   - name: py3-supported-${{vars.pypi-package}}
     description: meta package providing ${{vars.pypi-package}} for supported python versions.