MicroShift compiles several OpenShift components into a single binary, including the cluster-policy-controller. Because they are all built into 1 binary, the dependencies must all match. We use the openshift/kubernetes repository to manage some of those dependency levels across components.

When CPC was updated to kube 1.28, the patch in https://github.com/kubernetes/kubernetes/pull/120777 was needed and that patch is only upstream, not in openshift/kubernetes.

https://github.com/openshift/microshift/pull/2450 includes a carry patch to allow MicroShift to update to 1.28, but we need to bring the patch from 120777 into openshift/kubernetes so we can remove the carry patch.

4.14

Always

1.
2.
3.

We need 2 changes

1. Bring the patch from https://github.com/kubernetes/kubernetes/pull/120777 into openshift/kubernetes. This may happen automatically with a future kube incremental update. Can we do it sooner?
2. Use a replace directive so that the code referencing k8s.io/kubernetes in CPC actually pulls from openshift/kubernetes so all of the secondary dependencies remain compatible for compilation into MicroShift.