ROB-1161 Support Supabase publishable keys and fetch the api key from relay

.github/workflows/test_robusta.yaml

@@ -40,8 +40,12 @@ jobs:
           poetry install --extras "all"
           # Install tabulate version that fixes column width wrapping. Cannot be added to pypi as a git dependency, so adding it here
           pip install git+https://github.com/astanin/python-tabulate.git@b2c26bcb70e497f674b38aa7e29de12c0123708a#egg=tabulate
-          # robusta-cli is a separate project now, it needs to be installed for gen-config
-          pip install git+https://github.com/robusta-dev/robusta-cli.git
+          # robusta-cli is a separate project now, it needs to be installed for gen-config.
+          # It pins pydantic v1, so keep it in its own venv - installing it here downgrades
+          # pydantic and breaks supabase, which needs v2. Tests only run it as a command.
+          python -m venv /tmp/robusta-cli
+          /tmp/robusta-cli/bin/pip install git+https://github.com/robusta-dev/robusta-cli.git
+          echo /tmp/robusta-cli/bin >> $GITHUB_PATH
 
       # build robusta docker images for tests which run in-cluster on KIND
       - run: |-

docs/_ext/autorobusta.py

@@ -14,8 +14,8 @@
 from docutils.parsers.rst import directives
 from docutils.statemachine import StringList
 from PIL import Image
-from pydantic import BaseModel
-from pydantic.fields import ModelField
+from pydantic.v1 import BaseModel
+from pydantic.v1.fields import ModelField
 from sphinx.application import Sphinx
 from sphinx.util import nested_parse_with_titles
 from sphinx.util.docutils import SphinxDirective

playbooks/robusta_playbooks/api_service.py

@@ -4,7 +4,7 @@
 
 import yaml
 from kubernetes.client import ApiregistrationV1Api, V1APIServiceList
-from pydantic import BaseModel
+from pydantic.v1 import BaseModel
 from robusta.api import BaseBlock, FileBlock, MarkdownBlock, PrometheusKubernetesAlert, action
 
 

playbooks/robusta_playbooks/argo_cd.py

@@ -1,4 +1,4 @@
-from pydantic import SecretStr
+from pydantic.v1 import SecretStr
 
 from robusta.api import (
     ActionParams,

playbooks/robusta_playbooks/common_actions.py

@@ -2,7 +2,7 @@
 import re
 from typing import Dict, List, Optional
 
-from pydantic import BaseModel
+from pydantic.v1 import BaseModel
 
 from robusta.api import (
     ActionParams,

playbooks/robusta_playbooks/deployment_status_report.py

@@ -2,7 +2,7 @@
 from typing import List
 
 import requests
-from pydantic import SecretStr
+from pydantic.v1 import SecretStr
 
 from robusta.api import (
     GRAFANA_RENDERER_URL,

playbooks/robusta_playbooks/event_enrichments.py

@@ -2,7 +2,7 @@
 from typing import List, Optional
 
 from hikaru.model.rel_1_26 import Job, Node
-from pydantic import BaseModel
+from pydantic.v1 import BaseModel
 
 from robusta.api import (
     ActionException,

playbooks/robusta_playbooks/git_change_audit.py

@@ -3,7 +3,7 @@
 
 import hikaru
 from hikaru.meta import HikaruBase
-from pydantic import SecretStr
+from pydantic.v1 import SecretStr
 
 from robusta.api import (
     ActionParams,

playbooks/robusta_playbooks/k8s_resource_enrichments.py

@@ -18,7 +18,7 @@
     V1PodSpec,
     V1PodStatus,
 )
-from pydantic import BaseModel
+from pydantic.v1 import BaseModel
 from robusta.api import (
     ActionException,
     ActionParams,

playbooks/robusta_playbooks/krr.py

@@ -10,7 +10,7 @@
 
 from hikaru.model.rel_1_26 import Container, EnvVar, EnvVarSource, PodSpec, ResourceRequirements, SecretKeySelector, SecurityContext, Capabilities, SeccompProfile
 from prometrix import AWSPrometheusConfig, CoralogixPrometheusConfig, PrometheusAuthorization, PrometheusConfig
-from pydantic import BaseModel, ValidationError, validator
+from pydantic.v1 import BaseModel, ValidationError, validator
 from robusta.api import (
     IMAGE_REGISTRY,
     ActionParams,

playbooks/robusta_playbooks/oom_killer.py

@@ -4,7 +4,7 @@
 from datetime import datetime, timedelta
 from typing import List, Optional, Tuple
 
-import pydantic
+import pydantic.v1 as pydantic
 from hikaru.model.rel_1_26 import Node, Pod, PodList, ResourceRequirements
 
 from robusta.api import (

playbooks/robusta_playbooks/persistent_data.py

@@ -3,7 +3,7 @@
 import logging
 from typing import Dict
 
-from pydantic import BaseModel
+from pydantic.v1 import BaseModel
 
 from robusta.api import DeploymentEvent, Finding, FindingType, action, get_persistent_data
 

playbooks/robusta_playbooks/pod_troubleshooting.py

@@ -5,7 +5,7 @@
 from typing import Dict, List, Optional
 
 import humanize
-from pydantic import BaseModel
+from pydantic.v1 import BaseModel
 from robusta.api import (
     CallbackBlock,
     CallbackChoice,

playbooks/robusta_playbooks/popeye.py

@@ -18,7 +18,7 @@
     PodSpec,
     ResourceRequirements,
 )
-from pydantic import BaseModel, ValidationError
+from pydantic.v1 import BaseModel, ValidationError
 
 from robusta.api import (
     RUNNER_SERVICE_ACCOUNT,

playbooks/robusta_playbooks/workflow_trigger.py

@@ -37,7 +37,7 @@
 from typing import List, Optional, Union
 
 import requests
-from pydantic import SecretStr
+from pydantic.v1 import SecretStr
 from robusta.api import ActionException, ActionParams, ErrorCodes, PrometheusKubernetesAlert, RateLimiter, action
 
 

pyproject.toml

@@ -21,13 +21,13 @@ python = ">=3.10, <3.12"
 setuptools = "^80.9.0"
 colorlog = "^5.0.1"
 python-json-logger = "^3.0.0"
-pydantic = "^1.8.1"
+pydantic = "^2.11.7"
 kubernetes = "^26.1.0"
 pymsteams = "^0.1.16"
 # Bump to fix CVE-2026-45409 / GHSA-65pc-fj4g-8rjx (Moderate, GHSA published
 # 2026-05-19, older than 60 days): idna.encode() bypass of the CVE-2024-3651 fix
 idna= { version = ">=3.15", optional = true }
-supabase = "2.5.1"
+supabase = "2.28.1"
 tabulate = { version = "^0.8.10" }
 slack-sdk = { version = "^3.23.0" }
 Flask = { version = "^3.1.3", optional = true }
@@ -88,7 +88,8 @@ regex = "2024.5.15"
 pyjwt = "^2.13.0"
 urllib3 = "^2.7.0"
 httpx = "0.27.2"
-postgrest = "0.16.8"
+# realtime (supabase dependency) requires websockets.asyncio, added in websockets 13
+websockets = ">=13"
 # Pin to fix cve https://github.com/robusta-dev/robusta/security/dependabot/85
 h2 = "^4.3.0"
 # Pin to fix CVE-2026-30922 (transitive via google-auth)

scripts/generate_kubernetes_code.py

@@ -73,7 +73,7 @@ def autogenerate_events(f: TextIO):
         from hikaru import DiffDetail
         from hikaru.model.rel_1_26 import {KUBERNETES_RESOURCES_STR}
         from hikaru.utils import Response
-        from pydantic import BaseModel
+        from pydantic.v1 import BaseModel
         from typing import Union, Optional, List
         from ..base_event import K8sBaseChangeEvent
         from ....core.model.events import ExecutionBaseEvent, ExecutionEventBaseParams
@@ -374,7 +374,7 @@ def autogenerate_triggers(f: TextIO):
             """\
         from typing import Dict, Optional
 
-        from pydantic import BaseModel
+        from pydantic.v1 import BaseModel
 
         from robusta.core.model.k8s_operation_type import K8sOperationType
         from robusta.integrations.kubernetes.autogenerated.events import *

scripts/generate_playbook_descriptions.py

@@ -5,7 +5,7 @@
 import os
 from typing import Callable
 
-from pydantic import BaseModel
+from pydantic.v1 import BaseModel
 
 
 class PlaybookDescription(BaseModel):

src/robusta/core/discovery/discovery.py

@@ -38,7 +38,7 @@
     V1StatefulSetList,
     V1Volume,
 )
-from pydantic import BaseModel
+from pydantic.v1 import BaseModel
 
 from robusta.core.discovery import utils
 from robusta.core.model.cluster_status import ClusterStats

src/robusta/core/discovery/resource_names.py

@@ -1,7 +1,7 @@
 from typing import Callable, List, Optional
 
 from kubernetes import client
-from pydantic import BaseModel
+from pydantic.v1 import BaseModel
 
 from robusta.integrations.kubernetes.custom_models import DeploymentConfig, Rollout
 from robusta.utils.error_codes import ActionException, ErrorCodes

src/robusta/core/discovery/top_service_resolver.py

@@ -3,7 +3,7 @@
 from collections import defaultdict
 from typing import Dict, List, Optional
 
-from pydantic.main import BaseModel
+from pydantic.v1.main import BaseModel
 
 from robusta.core.model.env_vars import RESOURCE_UPDATES_CACHE_TTL_SEC
 

src/robusta/core/model/base_params.py

@@ -2,7 +2,7 @@
 from enum import Enum, auto
 from typing import Any, Dict, List, Optional, Union
 
-from pydantic import BaseModel, SecretStr, validator, Field
+from pydantic.v1 import BaseModel, SecretStr, validator, Field
 
 from robusta.integrations import openshift
 from robusta.utils.documented_pydantic import DocumentedModel

src/robusta/core/model/cluster_status.py

@@ -1,4 +1,6 @@
-from pydantic.main import BaseModel, List, Optional
+from typing import List, Optional
+
+from pydantic.v1 import BaseModel
 
 
 class ClusterStats(BaseModel):

src/robusta/core/model/events.py

@@ -6,7 +6,7 @@
 from enum import Enum
 from typing import Any, Dict, List, Optional, Callable
 
-from pydantic import BaseModel
+from pydantic.v1 import BaseModel
 
 from robusta.core.pubsub.event_emitter import EventEmitter
 from robusta.core.reporting.base import (

src/robusta/core/model/helm_release.py

@@ -1,5 +1,5 @@
 from typing import Optional, List, Any, Dict
-from pydantic import BaseModel
+from pydantic.v1 import BaseModel
 from base64 import b64decode
 from datetime import datetime
 import gzip

src/robusta/core/model/jobs.py

@@ -3,7 +3,7 @@
 
 from hikaru.model.rel_1_26 import Job
 from kubernetes.client import V1Container, V1Job, V1JobSpec, V1JobStatus, V1PodSpec
-from pydantic import BaseModel
+from pydantic.v1 import BaseModel
 
 from robusta.core.discovery import utils
 from robusta.core.model.pods import ContainerResources, ResourceAttributes

src/robusta/core/model/namespaces.py

@@ -1,5 +1,5 @@
 from typing import Optional, List
-from pydantic import BaseModel
+from pydantic.v1 import BaseModel
 from kubernetes.client import V1Namespace
 import json
 

src/robusta/core/model/nodes.py

@@ -1,6 +1,6 @@
 from typing import Dict
 
-from pydantic.main import BaseModel, Field
+from pydantic.v1 import BaseModel, Field
 
 
 class NodeInfo(BaseModel):

src/robusta/core/model/openshift_group.py

@@ -1,6 +1,6 @@
 from typing import Dict, Optional
 
-from pydantic import BaseModel
+from pydantic.v1 import BaseModel
 
 
 class OpenshiftGroup(BaseModel):

src/robusta/core/model/pods.py

@@ -5,7 +5,7 @@
 from hikaru.model.rel_1_26 import Container, ContainerState, ContainerStatus, Pod
 from kubernetes.client.models import V1Container, V1ContainerStatus, V1PodStatus, V1Pod, V1PodSpec, V1ResourceRequirements
 
-from pydantic import BaseModel
+from pydantic.v1 import BaseModel
 
 from robusta.integrations.kubernetes.api_client_utils import parse_kubernetes_datetime_to_ms
 

src/robusta/core/model/runner_config.py

@@ -1,7 +1,7 @@
 import base64
 from typing import Dict, List, Optional, Union, cast
 
-from pydantic import BaseModel, SecretStr, root_validator, validator
+from pydantic.v1 import BaseModel, SecretStr, root_validator, validator
 
 from robusta.core.playbooks.playbook_utils import get_env_replacement, replace_env_vars_values
 from robusta.core.sinks.datadog.datadog_sink_params import DataDogSinkConfigWrapper

src/robusta/core/model/services.py

@@ -2,7 +2,7 @@
 
 from hikaru.model.rel_1_26 import Container, Volume
 from kubernetes.client import V1Container, V1Volume
-from pydantic import BaseModel
+from pydantic.v1 import BaseModel
 
 
 class EnvVar(BaseModel):

src/robusta/core/persistency/in_memory.py

@@ -2,7 +2,7 @@
 from contextlib import contextmanager
 from typing import ContextManager, Dict, Type, TypeVar
 
-from pydantic import BaseModel
+from pydantic.v1 import BaseModel
 
 persistent_data: Dict[str, BaseModel] = {}
 

src/robusta/core/playbooks/actions_registry.py

@@ -1,7 +1,7 @@
 import inspect
 from typing import Callable, Dict, List, Optional, Tuple, Type, cast
 
-from pydantic.main import BaseModel
+from pydantic.v1.main import BaseModel
 
 from robusta.core.model.events import ExecutionBaseEvent, ExecutionEventBaseParams
 from robusta.utils.decorators import doublewrap

src/robusta/core/playbooks/base_trigger.py

@@ -1,7 +1,7 @@
 import abc
 from typing import Any, Dict, List, Optional, Type
 
-from pydantic import BaseModel
+from pydantic.v1 import BaseModel
 
 from robusta.core.model.events import ExecutionBaseEvent
 from robusta.core.reporting.base import Finding

src/robusta/core/playbooks/playbook_utils.py

@@ -3,8 +3,8 @@
 import re
 from typing import Dict, Optional
 
-from pydantic.main import BaseModel
-from pydantic.types import SecretStr
+from pydantic.v1.main import BaseModel
+from pydantic.v1.types import SecretStr
 
 
 def get_env_replacement(value: str) -> Optional[str]:

src/robusta/core/playbooks/prometheus_enrichment_utils.py

@@ -9,7 +9,7 @@
 import pygal
 from hikaru.model.rel_1_26 import Node
 from prometrix import PrometheusQueryResult
-from pydantic import BaseModel
+from pydantic.v1 import BaseModel
 
 from robusta.core.model.base_params import (
     ChartValuesFormat,

src/robusta/core/playbooks/trigger.py

@@ -1,4 +1,4 @@
-from pydantic import PrivateAttr
+from pydantic.v1 import PrivateAttr
 
 from robusta.core.playbooks.base_trigger import BaseTrigger
 from robusta.core.triggers.custom_triggers import CustomTriggers

src/robusta/core/reporting/action_requests.py

@@ -5,7 +5,7 @@
 from uuid import UUID
 
 import requests
-from pydantic import BaseModel
+from pydantic.v1 import BaseModel
 
 from robusta.core.model.env_vars import RELAY_EXTERNAL_ACTIONS_URL
 

src/robusta/core/reporting/base.py

@@ -9,7 +9,7 @@
 from typing import Any, Dict, List, Optional, Union
 from urllib.parse import urlencode
 
-from pydantic.main import BaseModel
+from pydantic.v1.main import BaseModel
 from strenum import StrEnum
 
 from robusta.core.discovery.top_service_resolver import TopServiceResolver

src/robusta/core/reporting/blocks.py

@@ -16,7 +16,7 @@
 import hikaru
 from hikaru import DiffDetail, DiffType
 from hikaru.model.rel_1_26 import HikaruDocumentBase
-from pydantic import BaseModel
+from pydantic.v1 import BaseModel
 
 from robusta.core.model.base_params import ChartValuesFormat
 

src/robusta/core/reporting/callbacks.py

@@ -1,6 +1,6 @@
 import time
 
-from pydantic import BaseModel
+from pydantic.v1 import BaseModel
 
 from robusta.core.playbooks.actions_registry import Action
 from robusta.core.reporting import CallbackChoice