From 2766ac8f75a8eb03a59c3ea9507043e63231cfa5 Mon Sep 17 00:00:00 2001
From: Mangirdas Judeikis <mangirdas@judeikis.lt>
Date: Tue, 15 Sep 2026 14:08:31 +0300
Subject: [PATCH 1/2] Bump kcp to 0.33.0

---
 internal/resources/resources.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/internal/resources/resources.go b/internal/resources/resources.go
index fa0d2cc6..7269e07d 100644
--- a/internal/resources/resources.go
+++ b/internal/resources/resources.go
@@ -44,7 +44,7 @@ const (
 	//
 	// When changing this to a new minor version, you must also update
 	// the .prow.yaml accordingly and shift the jobs.
-	ImageTag = "v0.32.3"
+	ImageTag = "v0.33.0"
 
 	appNameLabel      = "app.kubernetes.io/name"
 	appInstanceLabel  = "app.kubernetes.io/instance"

From f225048b13994c05279d1c5a2de2d0392baca658 Mon Sep 17 00:00:00 2001
From: Mangirdas Judeikis <mangirdas@judeikis.lt>
Date: Tue, 15 Sep 2026 14:44:37 +0300
Subject: [PATCH 2/2] go mod tidy + prow

---
 .prow.yaml | 28 +++++++++++++++++++++++++---
 go.mod     |  2 +-
 go.sum     |  4 ++--
 3 files changed, 28 insertions(+), 6 deletions(-)

diff --git a/.prow.yaml b/.prow.yaml
index 7c51cd8a..523648fb 100644
--- a/.prow.yaml
+++ b/.prow.yaml
@@ -168,9 +168,31 @@ presubmits:
           # docker-in-docker needs privileged mode
           securityContext:
             privileged: true
-  
 
-  # default is currently kcp 0.32
+  - name: pull-kcp-operator-test-e2e-0.32
+    decorate: true
+    run_if_changed: "(Dockerfile|Makefile|.prow.yaml|go.mod|go.sum|cmd|internal|sdk|hack|test|config)"
+    optional: false
+    clone_uri: "https://github.com/kcp-dev/kcp-operator"
+    labels:
+      preset-goproxy: "true"
+    spec:
+      containers:
+        - image: ghcr.io/kcp-dev/infra/build:1.26.4-1
+          command:
+            - hack/ci/run-e2e-tests.sh
+          env:
+            - name: KCP_TAG
+              value: release-0.32
+          resources:
+            requests:
+              memory: 8Gi
+              cpu: 4
+          # docker-in-docker needs privileged mode
+          securityContext:
+            privileged: true
+
+  # default is currently kcp 0.33
   - name: pull-kcp-operator-test-e2e-default
     decorate: true
     run_if_changed: "(Dockerfile|Makefile|.prow.yaml|go.mod|go.sum|cmd|internal|sdk|hack|test|config)"
@@ -207,7 +229,7 @@ presubmits:
             - name: KCP_TAG
               value: main
             - name: KCP_RELEASE
-              value: '0.32'
+              value: '0.33'
           resources:
             requests:
               memory: 8Gi
diff --git a/go.mod b/go.mod
index e79f770f..fa470183 100644
--- a/go.mod
+++ b/go.mod
@@ -12,7 +12,7 @@ require (
 	github.com/go-test/deep v1.1.1
 	github.com/kcp-dev/kcp-operator/sdk v0.7.2
 	github.com/kcp-dev/logicalcluster/v3 v3.0.5
-	github.com/kcp-dev/sdk v0.32.0
+	github.com/kcp-dev/sdk v0.33.0
 	github.com/prometheus/client_golang v1.23.2
 	github.com/spf13/pflag v1.0.10
 	github.com/stretchr/testify v1.11.1
diff --git a/go.sum b/go.sum
index 7712b60e..22e8d7f7 100644
--- a/go.sum
+++ b/go.sum
@@ -101,8 +101,8 @@ github.com/json-iterator/go v1.1.12 h1:PV8peI4a0ysnczrg+LtxykD8LfKY9ML6u2jnxaEnr
 github.com/json-iterator/go v1.1.12/go.mod h1:e30LSqwooZae/UwlEbR2852Gd8hjQvJoHmT4TnhNGBo=
 github.com/kcp-dev/logicalcluster/v3 v3.0.5 h1:JbYakokb+5Uinz09oTXomSUJVQsqfxEvU4RyHUYxHOU=
 github.com/kcp-dev/logicalcluster/v3 v3.0.5/go.mod h1:EWBUBxdr49fUB1cLMO4nOdBWmYifLbP1LfoL20KkXYY=
-github.com/kcp-dev/sdk v0.32.0 h1:H7BPHf/aZbdw/DbYLQX3Nu3lGeR5bmqOsmbt8KyqKRY=
-github.com/kcp-dev/sdk v0.32.0/go.mod h1:H6SCvNS25sReJ61YDy6OPEmngTUFP7/CY0fRM576FM4=
+github.com/kcp-dev/sdk v0.33.0 h1:IqqZ1GtL7g+5jz4DQF9ZzC1tBaOWm0zhy/bQey6FZe0=
+github.com/kcp-dev/sdk v0.33.0/go.mod h1:LMenQETN1Qrt0eq5OOpDq4ZqVhFQoW9+GckmWxDix7U=
 github.com/klauspost/compress v1.18.0 h1:c/Cqfb0r+Yi+JtIEq73FWXVkRonBlf0CRNYc8Zttxdo=
 github.com/klauspost/compress v1.18.0/go.mod h1:2Pp+KzxcywXVXMr50+X0Q/Lsb43OQHYWRCY2AiWywWQ=
 github.com/kr/pretty v0.3.1 h1:flRD4NNwYAUpkphVc1HcthR4KEIFJ65n8Mw5qdRn3LE=