kagenti
diff --git a/‎kagenti/backend/pyproject.toml‎
Lines changed: 5 additions & 1 deletion b/‎kagenti/backend/pyproject.toml‎
Lines changed: 5 additions & 1 deletion
diff --git a/‎kagenti/backend/uv.lock‎
Lines changed: 2 additions & 2 deletions b/‎kagenti/backend/uv.lock‎
Lines changed: 2 additions & 2 deletions
@@ -11,7 +11,11 @@ dependencies = [
     "uvicorn[standard]>=0.30.0",
     "pydantic>=2.9.0",
     "pydantic-settings>=2.5.0",
-    "kubernetes>=31.0.0",
+    # kubernetes 36.x has a breaking bug: load_incluster_config() stores the
+    # bearer token under key 'authorization' but auth_settings() looks for
+    # 'BearerToken', so the Authorization header is never sent (all calls → 403).
+    # See: https://github.com/kubernetes-client/python/issues/2582
+    "kubernetes>=31.0.0,!=36.*",
     "httpx>=0.27.0",
     "python-jose[cryptography]>=3.3.0",
     "python-multipart>=0.0.9",