Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat(helm): update chart cloudnative-pg to 0.22.1 #808

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

chii-bot[bot]
Copy link
Contributor

@chii-bot chii-bot bot commented Jun 13, 2023

This PR contains the following updates:

Package Update Change
cloudnative-pg (source) minor 0.16.1 -> 0.22.1

⚠ Dependency Lookup Warnings ⚠

Warnings were logged while processing this repo. Please check the Dependency Dashboard for more information.


Release Notes

cloudnative-pg/charts

v0.22.1

Compare Source

CloudNativePG Operator Helm Chart

What's Changed

Full Changelog: cloudnative-pg/charts@cluster-v0.0.11...cloudnative-pg-v0.22.1

v0.22.0

Compare Source

CloudNativePG Operator Helm Chart

What's Changed

Full Changelog: cloudnative-pg/charts@cloudnative-pg-v0.21.6...cloudnative-pg-v0.22.0

v0.21.6

Compare Source

CloudNativePG Operator Helm Chart

What's Changed

New Contributors

Full Changelog: cloudnative-pg/charts@cloudnative-pg-v0.21.5...cloudnative-pg-v0.21.6

v0.21.5

Compare Source

CloudNativePG Operator Helm Chart

What's Changed

Full Changelog: cloudnative-pg/charts@cloudnative-pg-v0.21.4...cloudnative-pg-v0.21.5

v0.21.4

Compare Source

CloudNativePG Operator Helm Chart

Full Changelog: cloudnative-pg/charts@cloudnative-pg-v0.21.3...cloudnative-pg-v0.21.4

v0.21.3

Compare Source

CloudNativePG Operator Helm Chart

Full Changelog: cloudnative-pg/charts@cloudnative-pg-v0.21.2...cloudnative-pg-v0.21.3

v0.21.2

Compare Source

CloudNativePG Operator Helm Chart

What's Changed

New Contributors

Full Changelog: cloudnative-pg/charts@cloudnative-pg-v0.21.1...cloudnative-pg-v0.21.2

v0.21.1

Compare Source

CloudNativePG Operator Helm Chart

What's Changed

New Contributors

Full Changelog: cloudnative-pg/charts@cloudnative-pg-v0.21.0...cloudnative-pg-v0.21.1

v0.21.0

Compare Source

CloudNativePG Operator Helm Chart

What's Changed

New Contributors

Full Changelog: cloudnative-pg/charts@cloudnative-pg-v0.20.2...cloudnative-pg-v0.21.0

v0.20.2

Compare Source

CloudNativePG Operator Helm Chart

What's Changed

New Contributors

Full Changelog: https://github.com/cloudnative-pg/charts/compare/ cloudnative-pg-v0.20.1...cloudnative-pg-v0.20.2

v0.20.1

Compare Source

CloudNativePG Operator Helm Chart

What's Changed

New Contributors

Full Changelog: https://github.com/cloudnative-pg/charts/commits/cloudnative-pg-v0.20.1

v0.20.0

Compare Source

v0.19.1

Compare Source

v0.19.0

Compare Source

v0.18.2

Compare Source

v0.18.1

Compare Source

v0.18.0

Compare Source

v0.17.2

Compare Source

v0.17.1

Compare Source

v0.17.0

Compare Source


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, click this checkbox.

This PR has been generated by Renovate Bot.

@chii-bot chii-bot bot requested a review from toboshii as a code owner June 13, 2023 10:16
@chii-bot chii-bot bot added renovate/helm type/minor size/XS Denotes a PR that changes 0-9 lines, ignoring generated files. area/cluster Changes made in the cluster directory labels Jun 13, 2023
@chii-bot
Copy link
Contributor Author

chii-bot bot commented Jun 13, 2023

Path: cluster/apps/database/cloudnative-pg/helm-release.yaml
Version: 0.16.1 -> 0.19.0

@@ -147,15 +147,16 @@
 description: "Time at which postgres started (based on epoch)"
 
 pg_replication:
- primary: true
- query: "SELECT CASE WHEN NOT pg_catalog.pg_is_in_recovery()
+ query: "SELECT CASE WHEN (
+ NOT pg_catalog.pg_is_in_recovery()
+ OR pg_catalog.pg_last_wal_receive_lsn() = pg_catalog.pg_last_wal_replay_lsn())
 THEN 0
 ELSE GREATEST (0,
 EXTRACT(EPOCH FROM (now() - pg_catalog.pg_last_xact_replay_timestamp())))
 END AS lag,
 pg_catalog.pg_is_in_recovery() AS in_recovery,
 EXISTS (TABLE pg_stat_wal_receiver) AS is_wal_receiver_up,
- (SELECT count(*) FROM pg_stat_replication) AS streaming_replicas"
+ (SELECT count(*) FROM pg_catalog.pg_stat_replication) AS streaming_replicas"
 metrics:
 - lag:
 usage: "GAUGE"
@@ -170,6 +171,35 @@
 usage: "GAUGE"
 description: "Number of streaming replicas connected to the instance"
 
+ pg_replication_slots:
+ query: |
+ SELECT slot_name,
+ slot_type,
+ database,
+ active,
+ (CASE pg_catalog.pg_is_in_recovery()
+ WHEN TRUE THEN pg_catalog.pg_wal_lsn_diff(pg_catalog.pg_last_wal_receive_lsn(), restart_lsn)
+ ELSE pg_catalog.pg_wal_lsn_diff(pg_catalog.pg_current_wal_lsn(), restart_lsn)
+ END) as pg_wal_lsn_diff
+ FROM pg_catalog.pg_replication_slots
+ WHERE NOT temporary
+ metrics:
+ - slot_name:
+ usage: "LABEL"
+ description: "Name of the replication slot"
+ - slot_type:
+ usage: "LABEL"
+ description: "Type of the replication slot"
+ - database:
+ usage: "LABEL"
+ description: "Name of the database"
+ - active:
+ usage: "GAUGE"
+ description: "Flag indicating whether the slot is active"
+ - pg_wal_lsn_diff:
+ usage: "GAUGE"
+ description: "Replication lag in bytes"
+
 pg_stat_archiver:
 query: |
 SELECT archived_count
@@ -326,10 +356,12 @@
 description: "Time spent writing data file blocks by backends in this database, in milliseconds"
 
 pg_stat_replication:
+ primary: true
 query: |
 SELECT usename
 , COALESCE(application_name, '') AS application_name
 , COALESCE(client_addr::text, '') AS client_addr
+ , COALESCE(client_port::text, '') AS client_port
 , EXTRACT(EPOCH FROM backend_start) AS backend_start
 , COALESCE(pg_catalog.age(backend_xmin), 0) AS backend_xmin_age
 , pg_catalog.pg_wal_lsn_diff(pg_catalog.pg_current_wal_lsn(), sent_lsn) AS sent_diff_bytes
@@ -350,6 +382,9 @@
 - client_addr:
 usage: "LABEL"
 description: "Client IP address"
+ - client_port:
+ usage: "LABEL"
+ description: "Client TCP port"
 - backend_start:
 usage: "COUNTER"
 description: "Time when this process was started"
@@ -398,9 +433,8 @@
 kind: CustomResourceDefinition
 metadata:
 annotations:
- controller-gen.kubebuilder.io/version: v0.9.2
+ controller-gen.kubebuilder.io/version: v0.13.0
 helm.sh/resource-policy: keep
- creationTimestamp: null
 name: backups.postgresql.cnpg.io
 spec:
 group: postgresql.cnpg.io
@@ -418,6 +452,9 @@
 - jsonPath: .spec.cluster.name
 name: Cluster
 type: string
+ - jsonPath: .spec.method
+ name: Method
+ type: string
 - jsonPath: .status.phase
 name: Phase
 type: string
@@ -449,6 +486,21 @@
 required:
 - name
 type: object
+ method:
+ default: barmanObjectStore
+ description: 'The backup method to be used, possible options are `barmanObjectStore` and `volumeSnapshot`. Defaults to: `barmanObjectStore`.'
+ enum:
+ - barmanObjectStore
+ - volumeSnapshot
+ type: string
+ target:
+ description: The policy to decide which instance should perform this backup. If empty, it defaults to `cluster.spec.backup.target`. Available options are empty string, `primary` and `prefer-standby`. `primary` to have backups run always on primary instances, `prefer-standby` to have backups run preferably on the most updated standby, if available.
+ enum:
+ - primary
+ - prefer-standby
+ type: string
+ required:
+ - cluster
 type: object
 status:
 description: 'Most recently observed status of the backup. This data may not be up to date. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status'
@@ -515,6 +567,9 @@
 backupId:
 description: The ID of the Barman backup
 type: string
+ backupName:
+ description: The Name of the Barman backup
+ type: string
 beginLSN:
 description: The starting xlog
 type: string
@@ -528,7 +583,7 @@
 description: Unused. Retained for compatibility with old versions.
 type: string
 destinationPath:
- description: The path where to store the backup (i.e. s3://bucket/path/to/folder) this path, with different destination folders, will be used for WALs and for data
+ description: The path where to store the backup (i.e. s3://bucket/path/to/folder) this path, with different destination folders, will be used for WALs and for data. This may not be populated in case of errors.
 type: string
 encryption:
 description: Encryption method required to S3 API
@@ -588,6 +643,9 @@
 description: The pod name
 type: string
 type: object
+ method:
+ description: The backup method being used
+ type: string
 phase:
 description: The last backup status
 type: string
@@ -653,6 +711,26 @@
 serverName:
 description: The server name on S3, the cluster name is used if this parameter is omitted
 type: string
+ snapshotBackupStatus:
+ description: Status of the volumeSnapshot backup
+ properties:
+ elements:
+ description: The elements list, populated with the gathered volume snapshots
+ items:
+ description: BackupSnapshotElementStatus is a volume snapshot that is part of a volume snapshot method backup
+ properties:
+ name:
+ description: Name is the snapshot resource name
+ type: string
+ type:
+ description: Type is tho role of the snapshot in the cluster, such as PG_DATA and PG_WAL
+ type: string
+ required:
+ - name
+ - type
+ type: object
+ type: array
+ type: object
 startedAt:
 description: When the backup was started
 format: date-time
@@ -661,9 +739,10 @@
 description: When the backup was terminated
 format: date-time
 type: string
- required:
- - destinationPath
 type: object
+ required:
+ - metadata
+ - spec
 type: object
 served: true
 storage: true
@@ -675,9 +754,8 @@
 kind: CustomResourceDefinition
 metadata:
 annotations:
- controller-gen.kubebuilder.io/version: v0.9.2
+ controller-gen.kubebuilder.io/version: v0.13.0
 helm.sh/resource-policy: keep
- creationTimestamp: null
 name: clusters.postgresql.cnpg.io
 spec:
 group: postgresql.cnpg.io
@@ -1460,9 +1538,44 @@
 - destinationPath
 type: object
 retentionPolicy:
- description: RetentionPolicy is the retention policy to be used for backups and WALs (i.e. '60d'). The retention policy is expressed in the form of `XXu` where `XX` is a positive integer and `u` is in `[dwm]` - days, weeks, months.
+ description: RetentionPolicy is the retention policy to be used for backups and WALs (i.e. '60d'). The retention policy is expressed in the form of `XXu` where `XX` is a positive integer and `u` is in `[dwm]` - days, weeks, months. It's currently only applicable when using the BarmanObjectStore method.
 pattern: ^[1-9][0-9]*[dwm]$
 type: string
+ target:
+ default: prefer-standby
+ description: The policy to decide which instance should perform backups. Available options are empty string, which will default to `prefer-standby` policy, `primary` to have backups run always on primary instances, `prefer-standby` to have backups run preferably on the most updated standby, if available.
+ enum:
+ - primary
+ - prefer-standby
+ type: string
+ volumeSnapshot:
+ description: VolumeSnapshot provides the configuration for the execution of volume snapshot backups.
+ properties:
+ annotations:
+ additionalProperties:
+ type: string
+ description: Annotations key-value pairs that will be added to .metadata.annotations snapshot resources.
+ type: object
+ className:
+ description: ClassName specifies the Snapshot Class to be used for PG_DATA PersistentVolumeClaim. It is the default class for the other types if no specific class is present
+ type: string
+ labels:
+ additionalProperties:
+ type: string
+ description: Labels are key-value pairs that will be added to .metadata.labels snapshot resources.
+ type: object
+ snapshotOwnerReference:
+ default: none
+ description: SnapshotOwnerReference indicates the type of owner reference the snapshot should have
+ enum:
+ - none
+ - cluster
+ - backup
+ type: string
+ walClassName:
+ description: WalClassName specifies the Snapshot Class to be used for the PG_WAL PersistentVolumeClaim.
+ type: string
+ type: object
 type: object
 bootstrap:
 description: Instructions to bootstrap this cluster
@@ -1497,6 +1610,10 @@
 items:
 type: string
 type: array
+ schemaOnly:
+ default: false
+ description: 'When set to true, only the `pre-data` and `post-data` sections of `pg_restore` are invoked, avoiding data import. Default: `false`.'
+ type: boolean
 source:
 description: The source of the import
 properties:
@@ -1626,7 +1743,7 @@
 description: Bootstrap the cluster from a backup
 properties:
 backup:
- description: The backup we need to restore
+ description: The backup object containing the physical base backup from which to initiate the recovery procedure. Mutually exclusive with `source` and `volumeSnapshots`.
 properties:
 endpointCA:
 description: EndpointCA store the CA bundle of the barman endpoint. Useful when using self-signed certificates to avoid errors with certificate issuer and barman-cloud-wal-archive.
@@ -1660,7 +1777,7 @@
 description: The ID of the backup from which to start the recovery process. If empty (default) the operator will automatically detect the backup based on targetTime or targetLSN if specified. Otherwise use the latest available backup in chronological order.
 type: string
 exclusive:
- description: Set the target to be exclusive (defaults to true)
+ description: Set the target to be exclusive. If omitted, defaults to false, so that in Postgres, `recovery_target_inclusive` will be true
 type: boolean
 targetImmediate:
 description: End recovery as soon as a consistent state is reached
@@ -1691,8 +1808,48 @@
 - name
 type: object
 source:
- description: The external cluster whose backup we will restore. This is also used as the name of the folder under which the backup is stored, so it must be set to the name of the source cluster
+ description: The external cluster whose backup we will restore. This is also used as the name of the folder under which the backup is stored, so it must be set to the name of the source cluster Mutually exclusive with `backup`.
 type: string
+ volumeSnapshots:
+ description: The static PVC data source(s) from which to initiate the recovery procedure. Currently supporting `VolumeSnapshot` and `PersistentVolumeClaim` resources that map an existing PVC group, compatible with CloudNativePG, and taken with a cold backup copy on a fenced Postgres instance (limitation which will be removed in the future when online backup will be implemented). Mutually exclusive with `backup`.
+ properties:
+ storage:
+ description: Configuration of the storage of the instances
+ properties:
+ apiGroup:
+ description: APIGroup is the group for the resource being referenced. If APIGroup is not specified, the specified Kind must be in the core API group. For any other third-party types, APIGroup is required.
+ type: string
+ kind:
+ description: Kind is the type of resource being referenced
+ type: string
+ name:
+ description: Name is the name of resource being referenced
+ type: string
+ required:
+ - kind
+ - name
+ type: object
+ x-kubernetes-map-type: atomic
+ walStorage:
+ description: Configuration of the storage for PostgreSQL WAL (Write-Ahead Log)
+ properties:
+ apiGroup:
+ description: APIGroup is the group for the resource being referenced. If APIGroup is not specified, the specified Kind must be in the core API group. For any other third-party types, APIGroup is required.
+ type: string
+ kind:
+ description: Kind is the type of resource being referenced
+ type: string
+ name:
+ description: Name is the name of resource being referenced
+ type: string
+ required:
+ - kind
+ - name
+ type: object
+ x-kubernetes-map-type: atomic
+ required:
+ - storage
+ type: object
 type: object
 type: object
 certificates:
@@ -1720,9 +1877,143 @@
 description: Description of this PostgreSQL cluster
 type: string
 enableSuperuserAccess:
- default: true
- description: When this option is enabled, the operator will use the `SuperuserSecret` to update the `postgres` user password (if the secret is not present, the operator will automatically create one). When this option is disabled, the operator will ignore the `SuperuserSecret` content, delete it when automatically created, and then blank the password of the `postgres` user by setting it to `NULL`. Enabled by default.
+ default: false
+ description: When this option is enabled, the operator will use the `SuperuserSecret` to update the `postgres` user password (if the secret is not present, the operator will automatically create one). When this option is disabled, the operator will ignore the `SuperuserSecret` content, delete it when automatically created, and then blank the password of the `postgres` user by setting it to `NULL`. Disabled by default.
 type: boolean
+ env:
+ description: Env follows the Env format to pass environment variables to the pods created in the cluster
+ items:
+ description: EnvVar represents an environment variable present in a Container.
+ properties:
+ name:
+ description: Name of the environment variable. Must be a C_IDENTIFIER.
+ type: string
+ value:
+ description: 'Variable references $(VAR_NAME) are expanded using the previously defined environment variables in the container and any service environment variables. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)". Escaped references will never be expanded, regardless of whether the variable exists or not. Defaults to "".'
+ type: string
+ valueFrom:
+ description: Source for the environment variable's value. Cannot be used if value is not empty.
+ properties:
+ configMapKeyRef:
+ description: Selects a key of a ConfigMap.
+ properties:
+ key:
+ description: The key to select.
+ type: string
+ name:
+ description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?'
+ type: string
+ optional:
+ description: Specify whether the ConfigMap or its key must be defined
+ type: boolean
+ required:
+ - key
+ type: object
+ x-kubernetes-map-type: atomic
+ fieldRef:
+ description: 'Selects a field of the pod: supports metadata.name, metadata.namespace, `metadata.labels[''<KEY>'']`, `metadata.annotations[''<KEY>'']`, spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs.'
+ properties:
+ apiVersion:
+ description: Version of the schema the FieldPath is written in terms of, defaults to "v1".
+ type: string
+ fieldPath:
+ description: Path of the field to select in the specified API version.
+ type: string
+ required:
+ - fieldPath
+ type: object
+ x-kubernetes-map-type: atomic
+ resourceFieldRef:
+ description: 'Selects a resource of the container: only resources limits and requests (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu, requests.memory and requests.ephemeral-storage) are currently supported.'
+ properties:
+ containerName:
+ description: 'Container name: required for volumes, optional for env vars'
+ type: string
+ divisor:
+ anyOf:
+ - type: integer
+ - type: string
+ description: Specifies the output format of the exposed resources, defaults to "1"
+ pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
+ x-kubernetes-int-or-string: true
+ resource:
+ description: 'Required: resource to select'
+ type: string
+ required:
+ - resource
+ type: object
+ x-kubernetes-map-type: atomic
+ secretKeyRef:
+ description: Selects a key of a secret in the pod's namespace
+ properties:
+ key:
+ description: The key of the secret to select from. Must be a valid secret key.
+ type: string
+ name:
+ description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?'
+ type: string
+ optional:
+ description: Specify whether the Secret or its key must be defined
+ type: boolean
+ required:
+ - key
+ type: object
+ x-kubernetes-map-type: atomic
+ type: object
+ required:
+ - name
+ type: object
+ type: array
+ envFrom:
+ description: EnvFrom follows the EnvFrom format to pass environment variables sources to the pods to be used by Env
+ items:
+ description: EnvFromSource represents the source of a set of ConfigMaps
+ properties:
+ configMapRef:
+ description: The ConfigMap to select from
+ properties:
+ name:
+ description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?'
+ type: string
+ optional:
+ description: Specify whether the ConfigMap must be defined
+ type: boolean
+ type: object
+ x-kubernetes-map-type: atomic
+ prefix:
+ description: An optional identifier to prepend to each key in the ConfigMap. Must be a C_IDENTIFIER.
+ type: string
+ secretRef:
+ description: The Secret to select from
+ properties:
+ name:
+ description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?'
+ type: string
+ optional:
+ description: Specify whether the Secret must be defined
+ type: boolean
+ type: object
+ x-kubernetes-map-type: atomic
+ type: object
+ type: array
+ ephemeralVolumesSizeLimit:
+ description: EphemeralVolumesSizeLimit allows the user to set the limits for the ephemeral volumes
+ properties:
+ shm:
+ anyOf:
+ - type: integer
+ - type: string
+ description: Shm is the size limit of the shared memory volume
+ pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
+ x-kubernetes-int-or-string: true
+ temporaryData:
+ anyOf:
+ - type: integer
+ - type: string
+ description: TemporaryData is the size limit of the temporary data volume
+ pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
+ x-kubernetes-int-or-string: true
+ type: object
 externalClusters:
 description: The list of external clusters which are used in the configuration
 items:
@@ -2027,6 +2318,11 @@
 - name
 type: object
 type: array
+ failoverDelay:
+ default: 0
+ description: The amount of time (in seconds) to wait before triggering a failover after the primary PostgreSQL instance in the cluster was detected to be unhealthy
+ format: int32
+ type: integer
 imageName:
 description: Name of the container image, supporting both tags (`<image>:<tag>`) and digests for deterministic and repeatable deployments (`<image>:<tag>@sha256:<digestValue>`)
 type: string
@@ -2072,6 +2368,80 @@
 - debug
 - trace
 type: string
+ managed:
+ description: The configuration that is used by the portions of PostgreSQL that are managed by the instance manager
+ properties:
+ roles:
+ description: Database roles managed by the `Cluster`
+ items:
+ description: "RoleConfiguration is the representation, in Kubernetes, of a PostgreSQL role with the additional field Ensure specifying whether to ensure the presence or absence of the role in the database \n The defaults of the CREATE ROLE command are applied Reference: https://www.postgresql.org/docs/current/sql-createrole.html"
+ properties:
+ bypassrls:
+ description: Whether a role bypasses every row-level security (RLS) policy. Default is `false`.
+ type: boolean
+ comment:
+ description: Description of the role
+ type: string
+ connectionLimit:
+ default: -1
+ description: If the role can log in, this specifies how many concurrent connections the role can make. `-1` (the default) means no limit.
+ format: int64
+ type: integer
+ createdb:
+ description: When set to `true`, the role being defined will be allowed to create new databases. Specifying `false` (default) will deny a role the ability to create databases.
+ type: boolean
+ createrole:
+ description: Whether the role will be permitted to create, alter, drop, comment on, change the security label for, and grant or revoke membership in other roles. Default is `false`.
+ type: boolean
+ disablePassword:
+ description: DisablePassword indicates that a role's password should be set to NULL in Postgres
+ type: boolean
+ ensure:
+ default: present
+ description: Ensure the role is `present` or `absent` - defaults to "present"
+ enum:
+ - present
+ - absent
+ type: string
+ inRoles:
+ description: List of one or more existing roles to which this role will be immediately added as a new member. Default empty.
+ items:
+ type: string
+ type: array
+ inherit:
+ default: true
+ description: Whether a role "inherits" the privileges of roles it is a member of. Defaults is `true`.
+ type: boolean
+ login:
+ description: Whether the role is allowed to log in. A role having the `login` attribute can be thought of as a user. Roles without this attribute are useful for managing database privileges, but are not users in the usual sense of the word. Default is `false`.
+ type: boolean
+ name:
+ description: Name of the role
+ type: string
+ passwordSecret:
+ description: Secret containing the password of the role (if present) If null, the password will be ignored unless DisablePassword is set
+ properties:
+ name:
+ description: Name of the referent.
+ type: string
+ required:
+ - name
+ type: object
+ replication:
+ description: Whether a role is a replication role. A role must have this attribute (or be a superuser) in order to be able to connect to the server in replication mode (physical or logical replication) and in order to be able to create or drop replication slots. A role having the `replication` attribute is a very highly privileged role, and should only be used on roles actually used for replication. Default is `false`.
+ type: boolean
+ superuser:
+ description: Whether the role is a `superuser` who can override all access restrictions within the database - superuser status is dangerous and should be used only when really needed. You must yourself be a superuser to create a new superuser. Defaults is `false`.
+ type: boolean
+ validUntil:
+ description: Date and time after which the role's password is no longer valid. When omitted, the password will never expire (default).
+ format: date-time
+ type: string
+ required:
+ - name
+ type: object
+ type: array
+ type: object
 maxSyncReplicas:
 default: 0
 description: The target value for the synchronous replication quorum, that can be decreased if the number of ready standbys is lower than this. Undefined or 0 disable synchronous replication.
@@ -2137,8 +2507,6 @@
 default: true
 description: Reuse the existing PVC (wait for the node to come up again) or not (recreate it elsewhere - when `instances` >1)
 type: boolean
- required:
- - inProgress
 type: object
 postgresGID:
 default: 26
@@ -2249,40 +2617,196 @@
 type: object
 type: object
 primaryUpdateMethod:
- default: switchover
- description: 'Method to follow to upgrade the primary server during a rolling update procedure, after all replicas have been successfully updated: it can be with a switchover (`switchover` - default) or in-place (`restart`)'
+ default: restart
+ description: 'Method to follow to upgrade the primary server during a rolling update procedure, after all replicas have been successfully updated: it can be with a switchover (`switchover`) or in-place (`restart` - default)'
 enum:
 - switchover
 - restart
 type: string
 primaryUpdateStrategy:
 default: unsupervised
- description: 'Strategy to follow to upgrade the primary server during a rolling update procedure, after all replicas have been successfully updated: it can be automated (`unsupervised` - default) or manual (`supervised`)'
+ description: 'Deployment strategy to follow to upgrade the primary server during a rolling update procedure, after all replicas have been successfully updated: it can be automated (`unsupervised` - default) or manual (`supervised`)'
 enum:
 - unsupervised
 - supervised
 type: string
+ priorityClassName:
+ description: Name of the priority class which will be used in every generated Pod, if the PriorityClass specified does not exist, the pod will not be able to schedule. Please refer to https://kubernetes.io/docs/concepts/scheduling-eviction/pod-priority-preemption/#priorityclass for more information
+ type: string
+ projectedVolumeTemplate:
+ description: Template to be used to define projected volumes, projected volumes will be mounted under `/projected` base folder
+ properties:
+ defaultMode:
+ description: defaultMode are the mode bits used to set permissions on created files by default. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. Directories within the path are not affected by this setting. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.
+ format: int32
+ type: integer
+ sources:
+ description: sources is the list of volume projections
+ items:
+ description: Projection that may be projected along with other supported volume types
+ properties:
+ configMap:
+ description: configMap information about the configMap data to project
+ properties:
+ items:
+ description: items if unspecified, each key-value pair in the Data field of the referenced ConfigMap will be projected into the volume as a file whose name is the key and content is the value. If specified, the listed keys will be projected into the specified paths, and unlisted keys will not be present. If a key is specified which is not present in the ConfigMap, the volume setup will error unless it is marked optional. Paths must be relative and may not contain the '..' path or start with '..'.
+ items:
+ description: Maps a string key to a path within a volume.
+ properties:
+ key:
+ description: key is the key to project.
+ type: string
+ mode:
+ description: 'mode is Optional: mode bits used to set permissions on this file. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. If not specified, the volume defaultMode will be used. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.'
+ format: int32
+ type: integer
+ path:
+ description: path is the relative path of the file to map the key to. May not be an absolute path. May not contain the path element '..'. May not start with the string '..'.
+ type: string
+ required:
+ - key
+ - path
+ type: object
+ type: array
+ name:
+ description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?'
+ type: string
+ optional:
+ description: optional specify whether the ConfigMap or its keys must be defined
+ type: boolean
+ type: object
+ x-kubernetes-map-type: atomic
+ downwardAPI:
+ description: downwardAPI information about the downwardAPI data to project
+ properties:
+ items:
+ description: Items is a list of DownwardAPIVolume file
+ items:
+ description: DownwardAPIVolumeFile represents information to create the file containing the pod field
+ properties:
+ fieldRef:
+ description: 'Required: Selects a field of the pod: only annotations, labels, name and namespace are supported.'
+ properties:
+ apiVersion:
+ description: Version of the schema the FieldPath is written in terms of, defaults to "v1".
+ type: string
+ fieldPath:
+ description: Path of the field to select in the specified API version.
+ type: string
+ required:
+ - fieldPath
+ type: object
+ x-kubernetes-map-type: atomic
+ mode:
+ description: 'Optional: mode bits used to set permissions on this file, must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. If not specified, the volume defaultMode will be used. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.'
+ format: int32
+ type: integer
+ path:
+ description: 'Required: Path is the relative path name of the file to be created. Must not be absolute or contain the ''..'' path. Must be utf-8 encoded. The first item of the relative path must not start with ''..'''
+ type: string
+ resourceFieldRef:
+ description: 'Selects a resource of the container: only resources limits and requests (limits.cpu, limits.memory, requests.cpu and requests.memory) are currently supported.'
+ properties:
+ containerName:
+ description: 'Container name: required for volumes, optional for env vars'
+ type: string
+ divisor:
+ anyOf:
+ - type: integer
+ - type: string
+ description: Specifies the output format of the exposed resources, defaults to "1"
+ pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
+ x-kubernetes-int-or-string: true
+ resource:
+ description: 'Required: resource to select'
+ type: string
+ required:
+ - resource
+ type: object
+ x-kubernetes-map-type: atomic
+ required:
+ - path
+ type: object
+ type: array
+ type: object
+ secret:
+ description: secret information about the secret data to project
+ properties:
+ items:
+ description: items if unspecified, each key-value pair in the Data field of the referenced Secret will be projected into the volume as a file whose name is the key and content is the value. If specified, the listed keys will be projected into the specified paths, and unlisted keys will not be present. If a key is specified which is not present in the Secret, the volume setup will error unless it is marked optional. Paths must be relative and may not contain the '..' path or start with '..'.
+ items:
+ description: Maps a string key to a path within a volume.
+ properties:
+ key:
+ description: key is the key to project.
+ type: string
+ mode:
+ description: 'mode is Optional: mode bits used to set permissions on this file. Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511. YAML accepts both octal and decimal values, JSON requires decimal values for mode bits. If not specified, the volume defaultMode will be used. This might be in conflict with other options that affect the file mode, like fsGroup, and the result can be other mode bits set.'
+ format: int32
+ type: integer
+ path:
+ description: path is the relative path of the file to map the key to. May not be an absolute path. May not contain the path element '..'. May not start with the string '..'.
+ type: string
+ required:
+ - key
+ - path
+ type: object
+ type: array
+ name:
+ description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?'
+ type: string
+ optional:
+ description: optional field specify whether the Secret or its key must be defined
+ type: boolean
+ type: object
+ x-kubernetes-map-type: atomic
+ serviceAccountToken:
+ description: serviceAccountToken is information about the serviceAccountToken data to project
+ properties:
+ audience:
+ description: audience is the intended audience of the token. A recipient of a token must identify itself with an identifier specified in the audience of the token, and otherwise should reject the token. The audience defaults to the identifier of the apiserver.
+ type: string
+ expirationSeconds:
+ description: expirationSeconds is the requested duration of validity of the service account token. As the token approaches expiration, the kubelet volume plugin will proactively rotate the service account token. The kubelet will start trying to rotate the token if the token is older than 80 percent of its time to live or if the token is older than 24 hours.Defaults to 1 hour and must be at least 10 minutes.
+ format: int64
+ type: integer
+ path:
+ description: path is the path relative to the mount point of the file to project the token into.
+ type: string
+ required:
+ - path
+ type: object
+ type: object
+ type: array
+ type: object
 replica:
 description: Replica cluster configuration
 properties:
 enabled:
- description: If replica mode is enabled, this cluster will be a replica of an existing cluster. Replica cluster can be created from a recovery object store or via streaming through pg_basebackup. Refer to the Replication page of the documentation for more information.
+ description: If replica mode is enabled, this cluster will be a replica of an existing cluster. Replica cluster can be created from a recovery object store or via streaming through pg_basebackup. Refer to the Replica clusters page of the documentation for more information.
 type: boolean
 source:
 description: The name of the external cluster which is the replication origin
 minLength: 1
 type: string
 required:
+ - enabled
 - source
 type: object
 replicationSlots:
+ default:
+ highAvailability:
+ enabled: true
 description: Replication slots management configuration
 properties:
 highAvailability:
+ default:
+ enabled: true
 description: Replication slots for high availability configuration
 properties:
 enabled:
- description: If enabled, the operator will automatically manage replication slots on the primary instance and use them in streaming replication connections with all the standby instances that are part of the HA cluster. If disabled (default), the operator will not take advantage of replication slots in streaming connections with the replicas. This feature also controls replication slots in replica cluster, from the designated primary to its cascading replicas. This can only be set at creation time.
+ default: true
+ description: If enabled (default), the operator will automatically manage replication slots on the primary instance and use them in streaming replication connections with all the standby instances that are part of the HA cluster. If disabled, the operator will not take advantage of replication slots in streaming connections with the replicas. This feature also controls replication slots in replica cluster, from the designated primary to its cascading replicas.
 type: boolean
 slotPrefix:
 default: _cnpg_
@@ -2299,6 +2823,21 @@
 resources:
 description: Resources requirements of every generated Pod. Please refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ for more information.
 properties:
+ claims:
+ description: "Claims lists the names of resources, defined in spec.resourceClaims, that are used by this container. \n This is an alpha field and requires enabling the DynamicResourceAllocation feature gate. \n This field is immutable. It can only be set for containers."
+ items:
+ description: ResourceClaim references one entry in PodSpec.ResourceClaims.
+ properties:
+ name:
+ description: Name must match the name of one entry in pod.spec.resourceClaims of the Pod where this field is used. It makes that resource available inside a container.
+ type: string
+ required:
+ - name
+ type: object
+ type: array
+ x-kubernetes-list-map-keys:
+ - name
+ x-kubernetes-list-type: map
 limits:
 additionalProperties:
 anyOf:
@@ -2315,9 +2854,24 @@
 - type: string
 pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
 x-kubernetes-int-or-string: true
- description: 'Requests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/'
+ description: 'Requests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. Requests cannot exceed Limits. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/'
 type: object
 type: object
+ schedulerName:
+ description: 'If specified, the pod will be dispatched by specified Kubernetes scheduler. If not specified, the pod will be dispatched by the default scheduler. More info: https://kubernetes.io/docs/concepts/scheduling-eviction/kube-scheduler/'
+ type: string
+ seccompProfile:
+ description: 'The SeccompProfile applied to every Pod and Container. Defaults to: `RuntimeDefault`'
+ properties:
+ localhostProfile:
+ description: localhostProfile indicates a profile defined in a file on the node should be used. The profile must be preconfigured on the node to work. Must be a descending path, relative to the kubelet's configured seccomp profile location. Must be set if type is "Localhost". Must NOT be set for any other type.
+ type: string
+ type:
+ description: "type indicates which kind of seccomp profile will be applied. Valid options are: \n Localhost - a profile defined in a file on the node should be used. RuntimeDefault - the container runtime default profile should be used. Unconfined - no profile should be applied."
+ type: string
+ required:
+ - type
+ type: object
 serviceAccountTemplate:
 description: Configure the generation of the service account
 properties:
@@ -2338,14 +2892,19 @@
 required:
 - metadata
 type: object
+ smartShutdownTimeout:
+ default: 180
+ description: 'The time in seconds that controls the window of time reserved for the smart shutdown of Postgres to complete. Make sure you reserve enough time for the operator to request a fast shutdown of Postgres (that is: `stopDelay` - `smartShutdownTimeout`).'
+ format: int32
+ type: integer
 startDelay:
- default: 30
- description: The time in seconds that is allowed for a PostgreSQL instance to successfully start up (default 30)
+ default: 3600
+ description: 'The time in seconds that is allowed for a PostgreSQL instance to successfully start up (default 3600). The startup probe failure threshold is derived from this value using the formula: ceiling(startDelay / 10).'
 format: int32
 type: integer
 stopDelay:
- default: 30
- description: The time in seconds that is allowed for a PostgreSQL instance to gracefully shutdown (default 30)
+ default: 1800
+ description: The time in seconds that is allowed for a PostgreSQL instance to gracefully shutdown (default 1800)
 format: int32
 type: integer
 storage:
@@ -2360,7 +2919,7 @@
 type: string
 type: array
 dataSource:
- description: 'dataSource field can be used to specify either: LICENSE README.md Taskfile.yml cluster default docs hack mkdocs.yml scripts talos An existing VolumeSnapshot object (snapshot.storage.k8s.io/VolumeSnapshot) LICENSE README.md Taskfile.yml cluster default docs hack mkdocs.yml scripts talos An existing PVC (PersistentVolumeClaim) If the provisioner or an external controller can support the specified data source, it will create a new volume based on the contents of the specified data source. If the AnyVolumeDataSource feature gate is enabled, this field will always have the same contents as the DataSourceRef field.'
+ description: 'dataSource field can be used to specify either: LICENSE README.md Taskfile.yml cluster default docs hack mkdocs.yml scripts talos An existing VolumeSnapshot object (snapshot.storage.k8s.io/VolumeSnapshot) LICENSE README.md Taskfile.yml cluster default docs hack mkdocs.yml scripts talos An existing PVC (PersistentVolumeClaim) If the provisioner or an external controller can support the specified data source, it will create a new volume based on the contents of the specified data source. When the AnyVolumeDataSource feature gate is enabled, dataSource contents will be copied to dataSourceRef, and dataSourceRef contents will be copied to dataSource when dataSourceRef.namespace is not specified. If the namespace is specified, then dataSourceRef will not be copied to dataSource.'
 properties:
 apiGroup:
 description: APIGroup is the group for the resource being referenced. If APIGroup is not specified, the specified Kind must be in the core API group. For any other third-party types, APIGroup is required.
@@ -2377,7 +2936,7 @@
 type: object
 x-kubernetes-map-type: atomic
 dataSourceRef:
- description: 'dataSourceRef specifies the object from which to populate the volume with data, if a non-empty volume is desired. This may be any local object from a non-empty API group (non core object) or a PersistentVolumeClaim object. When this field is specified, volume binding will only succeed if the type of the specified object matches some installed volume populator or dynamic provisioner. This field will replace the functionality of the DataSource field and as such if both fields are non-empty, they must have the same value. For backwards compatibility, both fields (DataSource and DataSourceRef) will be set to the same value automatically if one of them is empty and the other is non-empty. There are two important differences between DataSource and DataSourceRef: LICENSE README.md Taskfile.yml cluster default docs hack mkdocs.yml scripts talos While DataSource only allows two specific types of objects, DataSourceRef allows any non-core object, as well as PersistentVolumeClaim objects. LICENSE README.md Taskfile.yml cluster default docs hack mkdocs.yml scripts talos While DataSource ignores disallowed values (dropping them), DataSourceRef preserves all values, and generates an error if a disallowed value is specified. (Beta) Using this field requires the AnyVolumeDataSource feature gate to be enabled.'
+ description: 'dataSourceRef specifies the object from which to populate the volume with data, if a non-empty volume is desired. This may be any object from a non-empty API group (non core object) or a PersistentVolumeClaim object. When this field is specified, volume binding will only succeed if the type of the specified object matches some installed volume populator or dynamic provisioner. This field will replace the functionality of the dataSource field and as such if both fields are non-empty, they must have the same value. For backwards compatibility, when namespace isn''t specified in dataSourceRef, both fields (dataSource and dataSourceRef) will be set to the same value automatically if one of them is empty and the other is non-empty. When namespace is specified in dataSourceRef, dataSource isn''t set to the same value and must be empty. There are three important differences between dataSource and dataSourceRef: LICENSE README.md Taskfile.yml cluster default docs hack mkdocs.yml scripts talos While dataSource only allows two specific types of objects, dataSourceRef allows any non-core object, as well as PersistentVolumeClaim objects. LICENSE README.md Taskfile.yml cluster default docs hack mkdocs.yml scripts talos While dataSource ignores disallowed values (dropping them), dataSourceRef preserves all values, and generates an error if a disallowed value is specified. LICENSE README.md Taskfile.yml cluster default docs hack mkdocs.yml scripts talos While dataSource only allows local objects, dataSourceRef allows objects in any namespaces. (Beta) Using this field requires the AnyVolumeDataSource feature gate to be enabled. (Alpha) Using the namespace field of dataSourceRef requires the CrossNamespaceVolumeDataSource feature gate to be enabled.'
 properties:
 apiGroup:
 description: APIGroup is the group for the resource being referenced. If APIGroup is not specified, the specified Kind must be in the core API group. For any other third-party types, APIGroup is required.
@@ -2388,14 +2947,31 @@
 name:
 description: Name is the name of resource being referenced
 type: string
+ namespace:
+ description: Namespace is the namespace of resource being referenced Note that when a namespace is specified, a gateway.networking.k8s.io/ReferenceGrant object is required in the referent namespace to allow that namespace's owner to accept the reference. See the ReferenceGrant documentation for details. (Alpha) This field requires the CrossNamespaceVolumeDataSource feature gate to be enabled.
+ type: string
 required:
 - kind
 - name
 type: object
- x-kubernetes-map-type: atomic
 resources:
 description: 'resources represents the minimum resources the volume should have. If RecoverVolumeExpansionFailure feature is enabled users are allowed to specify resource requirements that are lower than previous value but must still be higher than capacity recorded in the status field of the claim. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources'
 properties:
+ claims:
+ description: "Claims lists the names of resources, defined in spec.resourceClaims, that are used by this container. \n This is an alpha field and requires enabling the DynamicResourceAllocation feature gate. \n This field is immutable. It can only be set for containers."
+ items:
+ description: ResourceClaim references one entry in PodSpec.ResourceClaims.
+ properties:
+ name:
+ description: Name must match the name of one entry in pod.spec.resourceClaims of the Pod where this field is used. It makes that resource available inside a container.
+ type: string
+ required:
+ - name
+ type: object
+ type: array
+ x-kubernetes-list-map-keys:
+ - name
+ x-kubernetes-list-type: map
 limits:
 additionalProperties:
 anyOf:
@@ -2412,7 +2988,7 @@
 - type: string
 pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
 x-kubernetes-int-or-string: true
- description: 'Requests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/'
+ description: 'Requests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. Requests cannot exceed Limits. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/'
 type: object
 type: object
 selector:
@@ -2477,10 +3053,78 @@
 - name
 type: object
 switchoverDelay:
- default: 40000000
- description: The time in seconds that is allowed for a primary PostgreSQL instance to gracefully shutdown during a switchover. Default value is 40000000, greater than one year in seconds, big enough to simulate an infinite delay
+ default: 3600
+ description: The time in seconds that is allowed for a primary PostgreSQL instance to gracefully shutdown during a switchover. Default value is 3600 seconds (1 hour).
 format: int32
 type: integer
+ topologySpreadConstraints:
+ description: 'TopologySpreadConstraints specifies how to spread matching pods among the given topology. More info: https://kubernetes.io/docs/concepts/scheduling-eviction/topology-spread-constraints/'
+ items:
+ description: TopologySpreadConstraint specifies how to spread matching pods among the given topology.
+ properties:
+ labelSelector:
+ description: LabelSelector is used to find matching pods. Pods that match this label selector are counted to determine the number of pods in their corresponding topology domain.
+ properties:
+ matchExpressions:
+ description: matchExpressions is a list of label selector requirements. The requirements are ANDed.
+ items:
+ description: A label selector requirement is a selector that contains values, a key, and an operator that relates the key and values.
+ properties:
+ key:
+ description: key is the label key that the selector applies to.
+ type: string
+ operator:
+ description: operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.
+ type: string
+ values:
+ description: values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.
+ items:
+ type: string
+ type: array
+ required:
+ - key
+ - operator
+ type: object
+ type: array
+ matchLabels:
+ additionalProperties:
+ type: string
+ description: matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is "key", the operator is "In", and the values array contains only "value". The requirements are ANDed.
+ type: object
+ type: object
+ x-kubernetes-map-type: atomic
+ matchLabelKeys:
+ description: "MatchLabelKeys is a set of pod label keys to select the pods over which spreading will be calculated. The keys are used to lookup values from the incoming pod labels, those key-value labels are ANDed with labelSelector to select the group of existing pods over which spreading will be calculated for the incoming pod. The same key is forbidden to exist in both MatchLabelKeys and LabelSelector. MatchLabelKeys cannot be set when LabelSelector isn't set. Keys that don't exist in the incoming pod labels will be ignored. A null or empty list means only match against labelSelector. \n This is a beta field and requires the MatchLabelKeysInPodTopologySpread feature gate to be enabled (enabled by default)."
+ items:
+ type: string
+ type: array
+ x-kubernetes-list-type: atomic
+ maxSkew:
+ description: 'MaxSkew describes the degree to which pods may be unevenly distributed. When `whenUnsatisfiable=DoNotSchedule`, it is the maximum permitted difference between the number of matching pods in the target topology and the global minimum. The global minimum is the minimum number of matching pods in an eligible domain or zero if the number of eligible domains is less than MinDomains. For example, in a 3-zone cluster, MaxSkew is set to 1, and pods with the same labelSelector spread as 2/2/1: In this case, the global minimum is 1. | zone1 | zone2 | zone3 | | P P | P P | P | - if MaxSkew is 1, incoming pod can only be scheduled to zone3 to become 2/2/2; scheduling it onto zone1(zone2) would make the ActualSkew(3-1) on zone1(zone2) violate MaxSkew(1). - if MaxSkew is 2, incoming pod can be scheduled onto any zone. When `whenUnsatisfiable=ScheduleAnyway`, it is used to give higher precedence to topologies that satisfy it. It''s a required field. Default value is 1 and 0 is not allowed.'
+ format: int32
+ type: integer
+ minDomains:
+ description: "MinDomains indicates a minimum number of eligible domains. When the number of eligible domains with matching topology keys is less than minDomains, Pod Topology Spread treats \"global minimum\" as 0, and then the calculation of Skew is performed. And when the number of eligible domains with matching topology keys equals or greater than minDomains, this value has no effect on scheduling. As a result, when the number of eligible domains is less than minDomains, scheduler won't schedule more than maxSkew Pods to those domains. If value is nil, the constraint behaves as if MinDomains is equal to 1. Valid values are integers greater than 0. When value is not nil, WhenUnsatisfiable must be DoNotSchedule. \n For example, in a 3-zone cluster, MaxSkew is set to 2, MinDomains is set to 5 and pods with the same labelSelector spread as 2/2/2: | zone1 | zone2 | zone3 | | P P | P P | P P | The number of domains is less than 5(MinDomains), so \"global minimum\" is treated as 0. In this situation, new pod with the same labelSelector cannot be scheduled, because computed skew will be 3(3 - 0) if new Pod is scheduled to any of the three zones, it will violate MaxSkew. \n This is a beta field and requires the MinDomainsInPodTopologySpread feature gate to be enabled (enabled by default)."
+ format: int32
+ type: integer
+ nodeAffinityPolicy:
+ description: "NodeAffinityPolicy indicates how we will treat Pod's nodeAffinity/nodeSelector when calculating pod topology spread skew. Options are: - Honor: only nodes matching nodeAffinity/nodeSelector are included in the calculations. - Ignore: nodeAffinity/nodeSelector are ignored. All nodes are included in the calculations. \n If this value is nil, the behavior is equivalent to the Honor policy. This is a beta-level feature default enabled by the NodeInclusionPolicyInPodTopologySpread feature flag."
+ type: string
+ nodeTaintsPolicy:
+ description: "NodeTaintsPolicy indicates how we will treat node taints when calculating pod topology spread skew. Options are: - Honor: nodes without taints, along with tainted nodes for which the incoming pod has a toleration, are included. - Ignore: node taints are ignored. All nodes are included. \n If this value is nil, the behavior is equivalent to the Ignore policy. This is a beta-level feature default enabled by the NodeInclusionPolicyInPodTopologySpread feature flag."
+ type: string
+ topologyKey:
+ description: TopologyKey is the key of node labels. Nodes that have a label with this key and identical values are considered to be in the same topology. We consider each <key, value> as a "bucket", and try to put balanced number of pods into each bucket. We define a domain as a particular instance of a topology. Also, we define an eligible domain as a domain whose nodes meet the requirements of nodeAffinityPolicy and nodeTaintsPolicy. e.g. If TopologyKey is "kubernetes.io/hostname", each Node is a domain of that topology. And, if TopologyKey is "topology.kubernetes.io/zone", each zone is a domain of that topology. It's a required field.
+ type: string
+ whenUnsatisfiable:
+ description: 'WhenUnsatisfiable indicates how to deal with a pod if it doesn''t satisfy the spread constraint. - DoNotSchedule (default) tells the scheduler not to schedule it. - ScheduleAnyway tells the scheduler to schedule the pod in any location, but giving higher precedence to topologies that would help reduce the skew. A constraint is considered "Unsatisfiable" for an incoming pod if and only if every possible node assignment for that pod would violate "MaxSkew" on some topology. For example, in a 3-zone cluster, MaxSkew is set to 1, and pods with the same labelSelector spread as 3/1/1: | zone1 | zone2 | zone3 | | P P P | P | P | If WhenUnsatisfiable is set to DoNotSchedule, incoming pod can only be scheduled to zone2(zone3) to become 3/2/1(3/1/2) as ActualSkew(2-1) on zone2(zone3) satisfies MaxSkew(1). In other words, the cluster can still be imbalanced, but scheduler won''t make it *more* imbalanced. It''s a required field.'
+ type: string
+ required:
+ - maxSkew
+ - topologyKey
+ - whenUnsatisfiable
+ type: object
+ type: array
 walStorage:
 description: Configuration of the storage for PostgreSQL WAL (Write-Ahead Log)
 properties:
@@ -2493,7 +3137,7 @@
 type: string
 type: array
 dataSource:
- description: 'dataSource field can be used to specify either: LICENSE README.md Taskfile.yml cluster default docs hack mkdocs.yml scripts talos An existing VolumeSnapshot object (snapshot.storage.k8s.io/VolumeSnapshot) LICENSE README.md Taskfile.yml cluster default docs hack mkdocs.yml scripts talos An existing PVC (PersistentVolumeClaim) If the provisioner or an external controller can support the specified data source, it will create a new volume based on the contents of the specified data source. If the AnyVolumeDataSource feature gate is enabled, this field will always have the same contents as the DataSourceRef field.'
+ description: 'dataSource field can be used to specify either: LICENSE README.md Taskfile.yml cluster default docs hack mkdocs.yml scripts talos An existing VolumeSnapshot object (snapshot.storage.k8s.io/VolumeSnapshot) LICENSE README.md Taskfile.yml cluster default docs hack mkdocs.yml scripts talos An existing PVC (PersistentVolumeClaim) If the provisioner or an external controller can support the specified data source, it will create a new volume based on the contents of the specified data source. When the AnyVolumeDataSource feature gate is enabled, dataSource contents will be copied to dataSourceRef, and dataSourceRef contents will be copied to dataSource when dataSourceRef.namespace is not specified. If the namespace is specified, then dataSourceRef will not be copied to dataSource.'
 properties:
 apiGroup:
 description: APIGroup is the group for the resource being referenced. If APIGroup is not specified, the specified Kind must be in the core API group. For any other third-party types, APIGroup is required.
@@ -2510,7 +3154,7 @@
 type: object
 x-kubernetes-map-type: atomic
 dataSourceRef:
- description: 'dataSourceRef specifies the object from which to populate the volume with data, if a non-empty volume is desired. This may be any local object from a non-empty API group (non core object) or a PersistentVolumeClaim object. When this field is specified, volume binding will only succeed if the type of the specified object matches some installed volume populator or dynamic provisioner. This field will replace the functionality of the DataSource field and as such if both fields are non-empty, they must have the same value. For backwards compatibility, both fields (DataSource and DataSourceRef) will be set to the same value automatically if one of them is empty and the other is non-empty. There are two important differences between DataSource and DataSourceRef: LICENSE README.md Taskfile.yml cluster default docs hack mkdocs.yml scripts talos While DataSource only allows two specific types of objects, DataSourceRef allows any non-core object, as well as PersistentVolumeClaim objects. LICENSE README.md Taskfile.yml cluster default docs hack mkdocs.yml scripts talos While DataSource ignores disallowed values (dropping them), DataSourceRef preserves all values, and generates an error if a disallowed value is specified. (Beta) Using this field requires the AnyVolumeDataSource feature gate to be enabled.'
+ description: 'dataSourceRef specifies the object from which to populate the volume with data, if a non-empty volume is desired. This may be any object from a non-empty API group (non core object) or a PersistentVolumeClaim object. When this field is specified, volume binding will only succeed if the type of the specified object matches some installed volume populator or dynamic provisioner. This field will replace the functionality of the dataSource field and as such if both fields are non-empty, they must have the same value. For backwards compatibility, when namespace isn''t specified in dataSourceRef, both fields (dataSource and dataSourceRef) will be set to the same value automatically if one of them is empty and the other is non-empty. When namespace is specified in dataSourceRef, dataSource isn''t set to the same value and must be empty. There are three important differences between dataSource and dataSourceRef: LICENSE README.md Taskfile.yml cluster default docs hack mkdocs.yml scripts talos While dataSource only allows two specific types of objects, dataSourceRef allows any non-core object, as well as PersistentVolumeClaim objects. LICENSE README.md Taskfile.yml cluster default docs hack mkdocs.yml scripts talos While dataSource ignores disallowed values (dropping them), dataSourceRef preserves all values, and generates an error if a disallowed value is specified. LICENSE README.md Taskfile.yml cluster default docs hack mkdocs.yml scripts talos While dataSource only allows local objects, dataSourceRef allows objects in any namespaces. (Beta) Using this field requires the AnyVolumeDataSource feature gate to be enabled. (Alpha) Using the namespace field of dataSourceRef requires the CrossNamespaceVolumeDataSource feature gate to be enabled.'
 properties:
 apiGroup:
 description: APIGroup is the group for the resource being referenced. If APIGroup is not specified, the specified Kind must be in the core API group. For any other third-party types, APIGroup is required.
@@ -2521,14 +3165,31 @@
 name:
 description: Name is the name of resource being referenced
 type: string
+ namespace:
+ description: Namespace is the namespace of resource being referenced Note that when a namespace is specified, a gateway.networking.k8s.io/ReferenceGrant object is required in the referent namespace to allow that namespace's owner to accept the reference. See the ReferenceGrant documentation for details. (Alpha) This field requires the CrossNamespaceVolumeDataSource feature gate to be enabled.
+ type: string
 required:
 - kind
 - name
 type: object
- x-kubernetes-map-type: atomic
 resources:
 description: 'resources represents the minimum resources the volume should have. If RecoverVolumeExpansionFailure feature is enabled users are allowed to specify resource requirements that are lower than previous value but must still be higher than capacity recorded in the status field of the claim. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources'
 properties:
+ claims:
+ description: "Claims lists the names of resources, defined in spec.resourceClaims, that are used by this container. \n This is an alpha field and requires enabling the DynamicResourceAllocation feature gate. \n This field is immutable. It can only be set for containers."
+ items:
+ description: ResourceClaim references one entry in PodSpec.ResourceClaims.
+ properties:
+ name:
+ description: Name must match the name of one entry in pod.spec.resourceClaims of the Pod where this field is used. It makes that resource available inside a container.
+ type: string
+ required:
+ - name
+ type: object
+ type: array
+ x-kubernetes-list-map-keys:
+ - name
+ x-kubernetes-list-type: map
 limits:
 additionalProperties:
 anyOf:
@@ -2545,7 +3206,7 @@
 - type: string
 pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
 x-kubernetes-int-or-string: true
- description: 'Requests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/'
+ description: 'Requests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. Requests cannot exceed Limits. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/'
 type: object
 type: object
 selector:
@@ -2697,6 +3358,9 @@
 currentPrimary:
 description: Current primary instance
 type: string
+ currentPrimaryFailingSinceTimestamp:
+ description: The timestamp when the primary was detected to be unhealthy This field is reported when spec.failoverDelay is populated or during online upgrades
+ type: string
 currentPrimaryTimestamp:
 description: The timestamp when the last actual promotion to primary has occurred
 type: string
@@ -2724,7 +3388,7 @@
 type: string
 type: array
 instances:
- description: Total number of instances in the cluster
+ description: The total number of PVC Groups detected in the cluster. It may differ from the number of existing instance pods.
 type: integer
 instancesReportedState:
 additionalProperties:
@@ -2739,7 +3403,7 @@
 required:
 - isPrimary
 type: object
- description: the reported state of the instances during the last reconciliation loop
+ description: The reported state of the instances during the last reconciliation loop
 type: object
 instancesStatus:
 additionalProperties:
@@ -2752,9 +3416,47 @@
 description: How many Jobs have been created by this cluster
 format: int32
 type: integer
+ lastFailedBackup:
+ description: Stored as a date in RFC3339 format
+ type: string
+ lastSuccessfulBackup:
+ description: Stored as a date in RFC3339 format
+ type: string
 latestGeneratedNode:
 description: ID of the latest generated node (used to avoid node name clashing)
 type: integer
+ managedRolesStatus:
+ description: ManagedRolesStatus reports the state of the managed roles in the cluster
+ properties:
+ byStatus:
+ additionalProperties:
+ items:
+ type: string
+ type: array
+ description: ByStatus gives the list of roles in each state
+ type: object
+ cannotReconcile:
+ additionalProperties:
+ items:
+ type: string
+ type: array
+ description: CannotReconcile lists roles that cannot be reconciled in PostgreSQL, with an explanation of the cause
+ type: object
+ passwordStatus:
+ additionalProperties:
+ description: PasswordState represents the state of the password of a managed RoleConfiguration
+ properties:
+ resourceVersion:
+ description: the resource version of the password secret
+ type: string
+ transactionID:
+ description: the last transaction ID to affect the role definition in PostgreSQL
+ format: int64
+ type: integer
+ type: object
+ description: PasswordStatus gives the last transaction id and password secret version for each managed role
+ type: object
+ type: object
 onlineUpdateEnabled:
 description: OnlineUpdateEnabled shows if the online upgrade is enabled inside the cluster
 type: boolean
@@ -2784,7 +3486,7 @@
 description: Current list of read pods
 type: string
 readyInstances:
- description: Total number of ready instances in the cluster
+ description: The total number of ready instances in the cluster. It is equal to the number of ready instance pods.
 type: integer
 resizingPVC:
 description: List of all the PVCs that have ResizingPVC condition.
@@ -2806,6 +3508,11 @@
 clientCaSecretVersion:
 description: The resource version of the PostgreSQL client-side CA secret version
 type: string
+ managedRoleSecretVersion:
+ additionalProperties:
+ type: string
+ description: The resource versions of the managed roles secrets
+ type: object
 metrics:
 additionalProperties:
 type: string
@@ -2844,6 +3551,10 @@
 type: object
 description: Instances contains the pod topology of the instances
 type: object
+ nodesUsed:
+ description: NodesUsed represents the count of distinct nodes accommodating the instances. A value of '1' suggests that all instances are hosted on a single node, implying the absence of High Availability (HA). Ideally, this value should be the same as the number of instances in the Postgres HA cluster, implying shared nothing architecture on the compute side.
+ format: int32
+ type: integer
 successfullyExtracted:
 description: SuccessfullyExtracted indicates if the topology data was extract. It is useful to enact fallback behaviors in synchronous replica election in case of failures
 type: boolean
@@ -2857,6 +3568,9 @@
 description: Current write pod
 type: string
 type: object
+ required:
+ - metadata
+ - spec
 type: object
 served: true
 storage: true
@@ -2871,9 +3585,8 @@
 kind: CustomResourceDefinition
 metadata:
 annotations:
- controller-gen.kubebuilder.io/version: v0.9.2
+ controller-gen.kubebuilder.io/version: v0.13.0
 helm.sh/resource-policy: keep
- creationTimestamp: null
 name: poolers.postgresql.cnpg.io
 spec:
 group: postgresql.cnpg.io
@@ -2908,7 +3621,7 @@
 metadata:
 type: object
 spec:
- description: PoolerSpec defines the desired state of Pooler
+ description: 'Specification of the desired behavior of the Pooler. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status'
 properties:
 cluster:
 description: This is the cluster reference on which the Pooler will work. Pooler name should never match with any cluster name within the same namespace.
@@ -2919,11 +3632,42 @@
 required:
 - name
 type: object
+ deploymentStrategy:
+ description: The deployment strategy to use for pgbouncer to replace existing pods with new ones
+ properties:
+ rollingUpdate:
+ description: 'Rolling update config params. Present only if DeploymentStrategyType = RollingUpdate. --- TODO: Update this to follow our convention for oneOf, whatever we decide it to be.'
+ properties:
+ maxSurge:
+ anyOf:
+ - type: integer
+ - type: string
+ description: 'The maximum number of pods that can be scheduled above the desired number of pods. Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%). This can not be 0 if MaxUnavailable is 0. Absolute number is calculated from percentage by rounding up. Defaults to 25%. Example: when this is set to 30%, the new ReplicaSet can be scaled up immediately when the rolling update starts, such that the total number of old and new pods do not exceed 130% of desired pods. Once old pods have been killed, new ReplicaSet can be scaled up further, ensuring that total number of pods running at any time during the update is at most 130% of desired pods.'
+ x-kubernetes-int-or-string: true
+ maxUnavailable:
+ anyOf:
+ - type: integer
+ - type: string
+ description: 'The maximum number of pods that can be unavailable during the update. Value can be an absolute number (ex: 5) or a percentage of desired pods (ex: 10%). Absolute number is calculated from percentage by rounding down. This can not be 0 if MaxSurge is 0. Defaults to 25%. Example: when this is set to 30%, the old ReplicaSet can be scaled down to 70% of desired pods immediately when the rolling update starts. Once new pods are ready, old ReplicaSet can be scaled down further, followed by scaling up the new ReplicaSet, ensuring that the total number of pods available at all times during the update is at least 70% of desired pods.'
+ x-kubernetes-int-or-string: true
+ type: object
+ type:
+ description: Type of deployment. Can be "Recreate" or "RollingUpdate". Default is RollingUpdate.
+ type: string
+ type: object
 instances:
 default: 1
- description: The number of replicas we want
+ description: 'The number of replicas we want. Default: 1.'
 format: int32
 type: integer
+ monitoring:
+ description: The configuration of the monitoring infrastructure of this pooler.
+ properties:
+ enablePodMonitor:
+ default: false
+ description: Enable or disable the `PodMonitor`
+ type: boolean
+ type: object
 pgbouncer:
 description: The PgBouncer configuration
 properties:
@@ -2948,15 +3692,18 @@
 default: false
 description: When set to `true`, PgBouncer will disconnect from the PostgreSQL server, first waiting for all queries to complete, and pause all new client connections until this value is set to `false` (default). Internally, the operator calls PgBouncer's `PAUSE` and `RESUME` commands.
 type: boolean
+ pg_hba:
+ description: PostgreSQL Host Based Authentication rules (lines to be appended to the pg_hba.conf file)
+ items:
+ type: string
+ type: array
 poolMode:
 default: session
- description: The pool mode
+ description: 'The pool mode. Default: `session`.'
 enum:
 - session
 - transaction
 type: string
- required:
- - poolMode
 type: object
 template:
 description: The template of the Pod to be created
@@ -3621,7 +4368,7 @@
 description: HTTPHeader describes a custom header to be used in HTTP probes
 properties:
 name:
- description: The header field name
+ description: The header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
 type: string
 value:
 description: The header field value
@@ -3686,7 +4433,7 @@
 description: HTTPHeader describes a custom header to be used in HTTP probes
 properties:
 name:
- description: The header field name
+ description: The header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
 type: string
 value:
 description: The header field value
@@ -3745,7 +4492,7 @@
 format: int32
 type: integer
 grpc:
- description: GRPC specifies an action involving a GRPC port. This is a beta field and requires enabling GRPCContainerProbe feature gate.
+ description: GRPC specifies an action involving a GRPC port.
 properties:
 port:
 description: Port number of the gRPC service. Number must be in the range 1 to 65535.
@@ -3769,7 +4516,7 @@
 description: HTTPHeader describes a custom header to be used in HTTP probes
 properties:
 name:
- description: The header field name
+ description: The header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
 type: string
 value:
 description: The header field value
@@ -3881,7 +4628,7 @@
 format: int32
 type: integer
 grpc:
- description: GRPC specifies an action involving a GRPC port. This is a beta field and requires enabling GRPCContainerProbe feature gate.
+ description: GRPC specifies an action involving a GRPC port.
 properties:
 port:
 description: Port number of the gRPC service. Number must be in the range 1 to 65535.
@@ -3905,7 +4652,7 @@
 description: HTTPHeader describes a custom header to be used in HTTP probes
 properties:
 name:
- description: The header field name
+ description: The header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
 type: string
 value:
 description: The header field value
@@ -3966,9 +4713,41 @@
 format: int32
 type: integer
 type: object
+ resizePolicy:
+ description: Resources resize policy for the container.
+ items:
+ description: ContainerResizePolicy represents resource resize policy for the container.
+ properties:
+ resourceName:
+ description: 'Name of the resource to which this resource resize policy applies. Supported values: cpu, memory.'
+ type: string
+ restartPolicy:
+ description: Restart policy to apply when specified resource is resized. If not specified, it defaults to NotRequired.
+ type: string
+ required:
+ - resourceName
+ - restartPolicy
+ type: object
+ type: array
+ x-kubernetes-list-type: atomic
 resources:
 description: 'Compute Resources required by this container. Cannot be updated. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/'
 properties:
+ claims:
+ description: "Claims lists the names of resources, defined in spec.resourceClaims, that are used by this container. \n This is an alpha field and requires enabling the DynamicResourceAllocation feature gate. \n This field is immutable. It can only be set for containers."
+ items:
+ description: ResourceClaim references one entry in PodSpec.ResourceClaims.
+ properties:
+ name:
+ description: Name must match the name of one entry in pod.spec.resourceClaims of the Pod where this field is used. It makes that resource available inside a container.
+ type: string
+ required:
+ - name
+ type: object
+ type: array
+ x-kubernetes-list-map-keys:
+ - name
+ x-kubernetes-list-type: map
 limits:
 additionalProperties:
 anyOf:
@@ -3985,9 +4764,12 @@
 - type: string
 pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
 x-kubernetes-int-or-string: true
- description: 'Requests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/'
+ description: 'Requests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. Requests cannot exceed Limits. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/'
 type: object
 type: object
+ restartPolicy:
+ description: 'RestartPolicy defines the restart behavior of individual containers in a pod. This field may only be set for init containers, and the only allowed value is "Always". For non-init containers or when this field is not specified, the restart behavior is defined by the Pod''s restart policy and the container type. Setting the RestartPolicy as "Always" for the init container will have the following effect: this init container will be continually restarted on exit until all regular containers have terminated. Once all regular containers have completed, all init containers with restartPolicy "Always" will be shut down. This lifecycle differs from normal init containers and is often referred to as a "sidecar" container. Although this init container still starts in the init container sequence, it does not wait for the container to complete before proceeding to the next init container. Instead, the next init container starts immediately after this init container is started, or after any startupProbe has successfully completed.'
+ type: string
 securityContext:
 description: 'SecurityContext defines the security options the container should be run with. If set, the fields of SecurityContext override the equivalent fields of PodSecurityContext. More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/'
 properties:
@@ -4050,7 +4832,7 @@
 description: The seccomp options to use by this container. If seccomp options are provided at both the pod & container level, the container options override the pod options. Note that this field cannot be set when spec.os.name is windows.
 properties:
 localhostProfile:
- description: localhostProfile indicates a profile defined in a file on the node should be used. The profile must be preconfigured on the node to work. Must be a descending path, relative to the kubelet's configured seccomp profile location. Must only be set if type is "Localhost".
+ description: localhostProfile indicates a profile defined in a file on the node should be used. The profile must be preconfigured on the node to work. Must be a descending path, relative to the kubelet's configured seccomp profile location. Must be set if type is "Localhost". Must NOT be set for any other type.
 type: string
 type:
 description: "type indicates which kind of seccomp profile will be applied. Valid options are: \n Localhost - a profile defined in a file on the node should be used. RuntimeDefault - the container runtime default profile should be used. Unconfined - no profile should be applied."
@@ -4068,7 +4850,7 @@
 description: GMSACredentialSpecName is the name of the GMSA credential spec to use.
 type: string
 hostProcess:
- description: HostProcess determines if a container should be run as a 'Host Process' container. This field is alpha-level and will only be honored by components that enable the WindowsHostProcessContainers feature flag. Setting this field without the feature flag will result in errors when validating the Pod. All of a Pod's containers must have the same effective HostProcess value (it is not allowed to have a mix of HostProcess containers and non-HostProcess containers). In addition, if HostProcess is true then HostNetwork must also be set to true.
+ description: HostProcess determines if a container should be run as a 'Host Process' container. All of a Pod's containers must have the same effective HostProcess value (it is not allowed to have a mix of HostProcess containers and non-HostProcess containers). In addition, if HostProcess is true then HostNetwork must also be set to true.
 type: boolean
 runAsUserName:
 description: The UserName in Windows to run the entrypoint of the container process. Defaults to the user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
@@ -4092,7 +4874,7 @@
 format: int32
 type: integer
 grpc:
- description: GRPC specifies an action involving a GRPC port. This is a beta field and requires enabling GRPCContainerProbe feature gate.
+ description: GRPC specifies an action involving a GRPC port.
 properties:
 port:
 description: Port number of the gRPC service. Number must be in the range 1 to 65535.
@@ -4116,7 +4898,7 @@
 description: HTTPHeader describes a custom header to be used in HTTP probes
 properties:
 name:
- description: The header field name
+ description: The header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
 type: string
 value:
 description: The header field value
@@ -4439,7 +5221,7 @@
 description: HTTPHeader describes a custom header to be used in HTTP probes
 properties:
 name:
- description: The header field name
+ description: The header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
 type: string
 value:
 description: The header field value
@@ -4504,7 +5286,7 @@
 description: HTTPHeader describes a custom header to be used in HTTP probes
 properties:
 name:
- description: The header field name
+ description: The header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
 type: string
 value:
 description: The header field value
@@ -4563,7 +5345,7 @@
 format: int32
 type: integer
 grpc:
- description: GRPC specifies an action involving a GRPC port. This is a beta field and requires enabling GRPCContainerProbe feature gate.
+ description: GRPC specifies an action involving a GRPC port.
 properties:
 port:
 description: Port number of the gRPC service. Number must be in the range 1 to 65535.
@@ -4587,7 +5369,7 @@
 description: HTTPHeader describes a custom header to be used in HTTP probes
 properties:
 name:
- description: The header field name
+ description: The header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
 type: string
 value:
 description: The header field value
@@ -4699,7 +5481,7 @@
 format: int32
 type: integer
 grpc:
- description: GRPC specifies an action involving a GRPC port. This is a beta field and requires enabling GRPCContainerProbe feature gate.
+ description: GRPC specifies an action involving a GRPC port.
 properties:
 port:
 description: Port number of the gRPC service. Number must be in the range 1 to 65535.
@@ -4723,7 +5505,7 @@
 description: HTTPHeader describes a custom header to be used in HTTP probes
 properties:
 name:
- description: The header field name
+ description: The header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
 type: string
 value:
 description: The header field value
@@ -4784,9 +5566,41 @@
 format: int32
 type: integer
 type: object
+ resizePolicy:
+ description: Resources resize policy for the container.
+ items:
+ description: ContainerResizePolicy represents resource resize policy for the container.
+ properties:
+ resourceName:
+ description: 'Name of the resource to which this resource resize policy applies. Supported values: cpu, memory.'
+ type: string
+ restartPolicy:
+ description: Restart policy to apply when specified resource is resized. If not specified, it defaults to NotRequired.
+ type: string
+ required:
+ - resourceName
+ - restartPolicy
+ type: object
+ type: array
+ x-kubernetes-list-type: atomic
 resources:
 description: Resources are not allowed for ephemeral containers. Ephemeral containers use spare resources already allocated to the pod.
 properties:
+ claims:
+ description: "Claims lists the names of resources, defined in spec.resourceClaims, that are used by this container. \n This is an alpha field and requires enabling the DynamicResourceAllocation feature gate. \n This field is immutable. It can only be set for containers."
+ items:
+ description: ResourceClaim references one entry in PodSpec.ResourceClaims.
+ properties:
+ name:
+ description: Name must match the name of one entry in pod.spec.resourceClaims of the Pod where this field is used. It makes that resource available inside a container.
+ type: string
+ required:
+ - name
+ type: object
+ type: array
+ x-kubernetes-list-map-keys:
+ - name
+ x-kubernetes-list-type: map
 limits:
 additionalProperties:
 anyOf:
@@ -4803,9 +5617,12 @@
 - type: string
 pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
 x-kubernetes-int-or-string: true
- description: 'Requests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/'
+ description: 'Requests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. Requests cannot exceed Limits. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/'
 type: object
 type: object
+ restartPolicy:
+ description: Restart policy for the container to manage the restart behavior of each container within a pod. This may only be set for init containers. You cannot set this field on ephemeral containers.
+ type: string
 securityContext:
 description: 'Optional: SecurityContext defines the security options the ephemeral container should be run with. If set, the fields of SecurityContext override the equivalent fields of PodSecurityContext.'
 properties:
@@ -4868,7 +5685,7 @@
 description: The seccomp options to use by this container. If seccomp options are provided at both the pod & container level, the container options override the pod options. Note that this field cannot be set when spec.os.name is windows.
 properties:
 localhostProfile:
- description: localhostProfile indicates a profile defined in a file on the node should be used. The profile must be preconfigured on the node to work. Must be a descending path, relative to the kubelet's configured seccomp profile location. Must only be set if type is "Localhost".
+ description: localhostProfile indicates a profile defined in a file on the node should be used. The profile must be preconfigured on the node to work. Must be a descending path, relative to the kubelet's configured seccomp profile location. Must be set if type is "Localhost". Must NOT be set for any other type.
 type: string
 type:
 description: "type indicates which kind of seccomp profile will be applied. Valid options are: \n Localhost - a profile defined in a file on the node should be used. RuntimeDefault - the container runtime default profile should be used. Unconfined - no profile should be applied."
@@ -4886,7 +5703,7 @@
 description: GMSACredentialSpecName is the name of the GMSA credential spec to use.
 type: string
 hostProcess:
- description: HostProcess determines if a container should be run as a 'Host Process' container. This field is alpha-level and will only be honored by components that enable the WindowsHostProcessContainers feature flag. Setting this field without the feature flag will result in errors when validating the Pod. All of a Pod's containers must have the same effective HostProcess value (it is not allowed to have a mix of HostProcess containers and non-HostProcess containers). In addition, if HostProcess is true then HostNetwork must also be set to true.
+ description: HostProcess determines if a container should be run as a 'Host Process' container. All of a Pod's containers must have the same effective HostProcess value (it is not allowed to have a mix of HostProcess containers and non-HostProcess containers). In addition, if HostProcess is true then HostNetwork must also be set to true.
 type: boolean
 runAsUserName:
 description: The UserName in Windows to run the entrypoint of the container process. Defaults to the user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
@@ -4910,7 +5727,7 @@
 format: int32
 type: integer
 grpc:
- description: GRPC specifies an action involving a GRPC port. This is a beta field and requires enabling GRPCContainerProbe feature gate.
+ description: GRPC specifies an action involving a GRPC port.
 properties:
 port:
 description: Port number of the gRPC service. Number must be in the range 1 to 65535.
@@ -4934,7 +5751,7 @@
 description: HTTPHeader describes a custom header to be used in HTTP probes
 properties:
 name:
- description: The header field name
+ description: The header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
 type: string
 value:
 description: The header field value
@@ -5269,7 +6086,7 @@
 description: HTTPHeader describes a custom header to be used in HTTP probes
 properties:
 name:
- description: The header field name
+ description: The header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
 type: string
 value:
 description: The header field value
@@ -5334,7 +6151,7 @@
 description: HTTPHeader describes a custom header to be used in HTTP probes
 properties:
 name:
- description: The header field name
+ description: The header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
 type: string
 value:
 description: The header field value
@@ -5393,7 +6210,7 @@
 format: int32
 type: integer
 grpc:
- description: GRPC specifies an action involving a GRPC port. This is a beta field and requires enabling GRPCContainerProbe feature gate.
+ description: GRPC specifies an action involving a GRPC port.
 properties:
 port:
 description: Port number of the gRPC service. Number must be in the range 1 to 65535.
@@ -5417,7 +6234,7 @@
 description: HTTPHeader describes a custom header to be used in HTTP probes
 properties:
 name:
- description: The header field name
+ description: The header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
 type: string
 value:
 description: The header field value
@@ -5529,7 +6346,7 @@
 format: int32
 type: integer
 grpc:
- description: GRPC specifies an action involving a GRPC port. This is a beta field and requires enabling GRPCContainerProbe feature gate.
+ description: GRPC specifies an action involving a GRPC port.
 properties:
 port:
 description: Port number of the gRPC service. Number must be in the range 1 to 65535.
@@ -5553,7 +6370,7 @@
 description: HTTPHeader describes a custom header to be used in HTTP probes
 properties:
 name:
- description: The header field name
+ description: The header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
 type: string
 value:
 description: The header field value
@@ -5614,9 +6431,41 @@
 format: int32
 type: integer
 type: object
+ resizePolicy:
+ description: Resources resize policy for the container.
+ items:
+ description: ContainerResizePolicy represents resource resize policy for the container.
+ properties:
+ resourceName:
+ description: 'Name of the resource to which this resource resize policy applies. Supported values: cpu, memory.'
+ type: string
+ restartPolicy:
+ description: Restart policy to apply when specified resource is resized. If not specified, it defaults to NotRequired.
+ type: string
+ required:
+ - resourceName
+ - restartPolicy
+ type: object
+ type: array
+ x-kubernetes-list-type: atomic
 resources:
 description: 'Compute Resources required by this container. Cannot be updated. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/'
 properties:
+ claims:
+ description: "Claims lists the names of resources, defined in spec.resourceClaims, that are used by this container. \n This is an alpha field and requires enabling the DynamicResourceAllocation feature gate. \n This field is immutable. It can only be set for containers."
+ items:
+ description: ResourceClaim references one entry in PodSpec.ResourceClaims.
+ properties:
+ name:
+ description: Name must match the name of one entry in pod.spec.resourceClaims of the Pod where this field is used. It makes that resource available inside a container.
+ type: string
+ required:
+ - name
+ type: object
+ type: array
+ x-kubernetes-list-map-keys:
+ - name
+ x-kubernetes-list-type: map
 limits:
 additionalProperties:
 anyOf:
@@ -5633,9 +6482,12 @@
 - type: string
 pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
 x-kubernetes-int-or-string: true
- description: 'Requests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/'
+ description: 'Requests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. Requests cannot exceed Limits. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/'
 type: object
 type: object
+ restartPolicy:
+ description: 'RestartPolicy defines the restart behavior of individual containers in a pod. This field may only be set for init containers, and the only allowed value is "Always". For non-init containers or when this field is not specified, the restart behavior is defined by the Pod''s restart policy and the container type. Setting the RestartPolicy as "Always" for the init container will have the following effect: this init container will be continually restarted on exit until all regular containers have terminated. Once all regular containers have completed, all init containers with restartPolicy "Always" will be shut down. This lifecycle differs from normal init containers and is often referred to as a "sidecar" container. Although this init container still starts in the init container sequence, it does not wait for the container to complete before proceeding to the next init container. Instead, the next init container starts immediately after this init container is started, or after any startupProbe has successfully completed.'
+ type: string
 securityContext:
 description: 'SecurityContext defines the security options the container should be run with. If set, the fields of SecurityContext override the equivalent fields of PodSecurityContext. More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/'
 properties:
@@ -5698,7 +6550,7 @@
 description: The seccomp options to use by this container. If seccomp options are provided at both the pod & container level, the container options override the pod options. Note that this field cannot be set when spec.os.name is windows.
 properties:
 localhostProfile:
- description: localhostProfile indicates a profile defined in a file on the node should be used. The profile must be preconfigured on the node to work. Must be a descending path, relative to the kubelet's configured seccomp profile location. Must only be set if type is "Localhost".
+ description: localhostProfile indicates a profile defined in a file on the node should be used. The profile must be preconfigured on the node to work. Must be a descending path, relative to the kubelet's configured seccomp profile location. Must be set if type is "Localhost". Must NOT be set for any other type.
 type: string
 type:
 description: "type indicates which kind of seccomp profile will be applied. Valid options are: \n Localhost - a profile defined in a file on the node should be used. RuntimeDefault - the container runtime default profile should be used. Unconfined - no profile should be applied."
@@ -5716,7 +6568,7 @@
 description: GMSACredentialSpecName is the name of the GMSA credential spec to use.
 type: string
 hostProcess:
- description: HostProcess determines if a container should be run as a 'Host Process' container. This field is alpha-level and will only be honored by components that enable the WindowsHostProcessContainers feature flag. Setting this field without the feature flag will result in errors when validating the Pod. All of a Pod's containers must have the same effective HostProcess value (it is not allowed to have a mix of HostProcess containers and non-HostProcess containers). In addition, if HostProcess is true then HostNetwork must also be set to true.
+ description: HostProcess determines if a container should be run as a 'Host Process' container. All of a Pod's containers must have the same effective HostProcess value (it is not allowed to have a mix of HostProcess containers and non-HostProcess containers). In addition, if HostProcess is true then HostNetwork must also be set to true.
 type: boolean
 runAsUserName:
 description: The UserName in Windows to run the entrypoint of the container process. Defaults to the user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
@@ -5740,7 +6592,7 @@
 format: int32
 type: integer
 grpc:
- description: GRPC specifies an action involving a GRPC port. This is a beta field and requires enabling GRPCContainerProbe feature gate.
+ description: GRPC specifies an action involving a GRPC port.
 properties:
 port:
 description: Port number of the gRPC service. Number must be in the range 1 to 65535.
@@ -5764,7 +6616,7 @@
 description: HTTPHeader describes a custom header to be used in HTTP probes
 properties:
 name:
- description: The header field name
+ description: The header field name. This will be canonicalized upon output, so case-variant names will be understood as the same header.
 type: string
 value:
 description: The header field value
@@ -5940,8 +6792,33 @@
 - conditionType
 type: object
 type: array
+ resourceClaims:
+ description: "ResourceClaims defines which ResourceClaims must be allocated and reserved before the Pod is allowed to start. The resources will be made available to those containers which consume them by name. \n This is an alpha field and requires enabling the DynamicResourceAllocation feature gate. \n This field is immutable."
+ items:
+ description: PodResourceClaim references exactly one ResourceClaim through a ClaimSource. It adds a name to it that uniquely identifies the ResourceClaim inside the Pod. Containers that need access to the ResourceClaim reference it with this name.
+ properties:
+ name:
+ description: Name uniquely identifies this resource claim inside the pod. This must be a DNS_LABEL.
+ type: string
+ source:
+ description: Source describes where to find the ResourceClaim.
+ properties:
+ resourceClaimName:
+ description: ResourceClaimName is the name of a ResourceClaim object in the same namespace as this pod.
+ type: string
+ resourceClaimTemplateName:
+ description: "ResourceClaimTemplateName is the name of a ResourceClaimTemplate object in the same namespace as this pod. \n The template will be used to create a new ResourceClaim, which will be bound to this pod. When this pod is deleted, the ResourceClaim will also be deleted. The pod name and resource name, along with a generated component, will be used to form a unique name for the ResourceClaim, which will be recorded in pod.status.resourceClaimStatuses. \n This field is immutable and no changes will be made to the corresponding ResourceClaim by the control plane after creating the ResourceClaim."
+ type: string
+ type: object
+ required:
+ - name
+ type: object
+ type: array
+ x-kubernetes-list-map-keys:
+ - name
+ x-kubernetes-list-type: map
 restartPolicy:
- description: 'Restart policy for all containers within the pod. One of Always, OnFailure, Never. Default to Always. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/#restart-policy'
+ description: 'Restart policy for all containers within the pod. One of Always, OnFailure, Never. In some contexts, only a subset of those values may be permitted. Default to Always. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/#restart-policy'
 type: string
 runtimeClassName:
 description: 'RuntimeClassName refers to a RuntimeClass object in the node.k8s.io group, which should be used to run this pod. If no RuntimeClass resource matches the named class, the pod will not be run. If unset or empty, the "legacy" RuntimeClass will be used, which is an implicit class with an empty definition that uses the default runtime handler. More info: https://git.k8s.io/enhancements/keps/sig-node/585-runtime-class'
@@ -5949,6 +6826,21 @@
 schedulerName:
 description: If specified, the pod will be dispatched by specified scheduler. If not specified, the pod will be dispatched by default scheduler.
 type: string
+ schedulingGates:
+ description: "SchedulingGates is an opaque list of values that if specified will block scheduling the pod. If schedulingGates is not empty, the pod will stay in the SchedulingGated state and the scheduler will not attempt to schedule the pod. \n SchedulingGates can only be set at pod creation time, and be removed only afterwards. \n This is a beta feature enabled by the PodSchedulingReadiness feature gate."
+ items:
+ description: PodSchedulingGate is associated to a Pod to guard its scheduling.
+ properties:
+ name:
+ description: Name of the scheduling gate. Each scheduling gate must have a unique name field.
+ type: string
+ required:
+ - name
+ type: object
+ type: array
+ x-kubernetes-list-map-keys:
+ - name
+ x-kubernetes-list-type: map
 securityContext:
 description: 'SecurityContext holds pod-level security attributes and common container settings. Optional: Defaults to empty. See type description for default values of each field.'
 properties:
@@ -5990,7 +6882,7 @@
 description: The seccomp options to use by the containers in this pod. Note that this field cannot be set when spec.os.name is windows.
 properties:
 localhostProfile:
- description: localhostProfile indicates a profile defined in a file on the node should be used. The profile must be preconfigured on the node to work. Must be a descending path, relative to the kubelet's configured seccomp profile location. Must only be set if type is "Localhost".
+ description: localhostProfile indicates a profile defined in a file on the node should be used. The profile must be preconfigured on the node to work. Must be a descending path, relative to the kubelet's configured seccomp profile location. Must be set if type is "Localhost". Must NOT be set for any other type.
 type: string
 type:
 description: "type indicates which kind of seccomp profile will be applied. Valid options are: \n Localhost - a profile defined in a file on the node should be used. RuntimeDefault - the container runtime default profile should be used. Unconfined - no profile should be applied."
@@ -5999,7 +6891,7 @@
 - type
 type: object
 supplementalGroups:
- description: A list of groups applied to the first process run in each container, in addition to the container's primary GID. If unspecified, no groups will be added to any container. Note that this field cannot be set when spec.os.name is windows.
+ description: A list of groups applied to the first process run in each container, in addition to the container's primary GID, the fsGroup (if specified), and group memberships defined in the container image for the uid of the container process. If unspecified, no additional groups are added to any container. Note that group memberships defined in the container image for the uid of the container process are still effective, even if they are not included in this list. Note that this field cannot be set when spec.os.name is windows.
 items:
 format: int64
 type: integer
@@ -6030,7 +6922,7 @@
 description: GMSACredentialSpecName is the name of the GMSA credential spec to use.
 type: string
 hostProcess:
- description: HostProcess determines if a container should be run as a 'Host Process' container. This field is alpha-level and will only be honored by components that enable the WindowsHostProcessContainers feature flag. Setting this field without the feature flag will result in errors when validating the Pod. All of a Pod's containers must have the same effective HostProcess value (it is not allowed to have a mix of HostProcess containers and non-HostProcess containers). In addition, if HostProcess is true then HostNetwork must also be set to true.
+ description: HostProcess determines if a container should be run as a 'Host Process' container. All of a Pod's containers must have the same effective HostProcess value (it is not allowed to have a mix of HostProcess containers and non-HostProcess containers). In addition, if HostProcess is true then HostNetwork must also be set to true.
 type: boolean
 runAsUserName:
 description: The UserName in Windows to run the entrypoint of the container process. Defaults to the user specified in image metadata if unspecified. May also be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
@@ -6116,7 +7008,7 @@
 type: object
 x-kubernetes-map-type: atomic
 matchLabelKeys:
- description: MatchLabelKeys is a set of pod label keys to select the pods over which spreading will be calculated. The keys are used to lookup values from the incoming pod labels, those key-value labels are ANDed with labelSelector to select the group of existing pods over which spreading will be calculated for the incoming pod. Keys that don't exist in the incoming pod labels will be ignored. A null or empty list means only match against labelSelector.
+ description: "MatchLabelKeys is a set of pod label keys to select the pods over which spreading will be calculated. The keys are used to lookup values from the incoming pod labels, those key-value labels are ANDed with labelSelector to select the group of existing pods over which spreading will be calculated for the incoming pod. The same key is forbidden to exist in both MatchLabelKeys and LabelSelector. MatchLabelKeys cannot be set when LabelSelector isn't set. Keys that don't exist in the incoming pod labels will be ignored. A null or empty list means only match against labelSelector. \n This is a beta field and requires the MatchLabelKeysInPodTopologySpread feature gate to be enabled (enabled by default)."
 items:
 type: string
 type: array
@@ -6130,10 +7022,10 @@
 format: int32
 type: integer
 nodeAffinityPolicy:
- description: "NodeAffinityPolicy indicates how we will treat Pod's nodeAffinity/nodeSelector when calculating pod topology spread skew. Options are: - Honor: only nodes matching nodeAffinity/nodeSelector are included in the calculations. - Ignore: nodeAffinity/nodeSelector are ignored. All nodes are included in the calculations. \n If this value is nil, the behavior is equivalent to the Honor policy. This is a alpha-level feature enabled by the NodeInclusionPolicyInPodTopologySpread feature flag."
+ description: "NodeAffinityPolicy indicates how we will treat Pod's nodeAffinity/nodeSelector when calculating pod topology spread skew. Options are: - Honor: only nodes matching nodeAffinity/nodeSelector are included in the calculations. - Ignore: nodeAffinity/nodeSelector are ignored. All nodes are included in the calculations. \n If this value is nil, the behavior is equivalent to the Honor policy. This is a beta-level feature default enabled by the NodeInclusionPolicyInPodTopologySpread feature flag."
 type: string
 nodeTaintsPolicy:
- description: "NodeTaintsPolicy indicates how we will treat node taints when calculating pod topology spread skew. Options are: - Honor: nodes without taints, along with tainted nodes for which the incoming pod has a toleration, are included. - Ignore: node taints are ignored. All nodes are included. \n If this value is nil, the behavior is equivalent to the Ignore policy. This is a alpha-level feature enabled by the NodeInclusionPolicyInPodTopologySpread feature flag."
+ description: "NodeTaintsPolicy indicates how we will treat node taints when calculating pod topology spread skew. Options are: - Honor: nodes without taints, along with tainted nodes for which the incoming pod has a toleration, are included. - Ignore: node taints are ignored. All nodes are included. \n If this value is nil, the behavior is equivalent to the Ignore policy. This is a beta-level feature default enabled by the NodeInclusionPolicyInPodTopologySpread feature flag."
 type: string
 topologyKey:
 description: TopologyKey is the key of node labels. Nodes that have a label with this key and identical values are considered to be in the same topology. We consider each <key, value> as a "bucket", and try to put balanced number of pods into each bucket. We define a domain as a particular instance of a topology. Also, we define an eligible domain as a domain whose nodes meet the requirements of nodeAffinityPolicy and nodeTaintsPolicy. e.g. If TopologyKey is "kubernetes.io/hostname", each Node is a domain of that topology. And, if TopologyKey is "topology.kubernetes.io/zone", each zone is a domain of that topology. It's a required field.
@@ -6400,7 +7292,7 @@
 anyOf:
 - type: integer
 - type: string
- description: 'sizeLimit is the total amount of local storage required for this EmptyDir volume. The size limit is also applicable for memory medium. The maximum usage on memory medium EmptyDir would be the minimum value between the SizeLimit specified here and the sum of memory limits of all containers in a pod. The default is nil which means that the limit is undefined. More info: http://kubernetes.io/docs/user-guide/volumes#emptydir'
+ description: 'sizeLimit is the total amount of local storage required for this EmptyDir volume. The size limit is also applicable for memory medium. The maximum usage on memory medium EmptyDir would be the minimum value between the SizeLimit specified here and the sum of memory limits of all containers in a pod. The default is nil which means that the limit is undefined. More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir'
 pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
 x-kubernetes-int-or-string: true
 type: object
@@ -6422,7 +7314,7 @@
 type: string
 type: array
 dataSource:
- description: 'dataSource field can be used to specify either: LICENSE README.md Taskfile.yml cluster default docs hack mkdocs.yml scripts talos An existing VolumeSnapshot object (snapshot.storage.k8s.io/VolumeSnapshot) LICENSE README.md Taskfile.yml cluster default docs hack mkdocs.yml scripts talos An existing PVC (PersistentVolumeClaim) If the provisioner or an external controller can support the specified data source, it will create a new volume based on the contents of the specified data source. If the AnyVolumeDataSource feature gate is enabled, this field will always have the same contents as the DataSourceRef field.'
+ description: 'dataSource field can be used to specify either: LICENSE README.md Taskfile.yml cluster default docs hack mkdocs.yml scripts talos An existing VolumeSnapshot object (snapshot.storage.k8s.io/VolumeSnapshot) LICENSE README.md Taskfile.yml cluster default docs hack mkdocs.yml scripts talos An existing PVC (PersistentVolumeClaim) If the provisioner or an external controller can support the specified data source, it will create a new volume based on the contents of the specified data source. When the AnyVolumeDataSource feature gate is enabled, dataSource contents will be copied to dataSourceRef, and dataSourceRef contents will be copied to dataSource when dataSourceRef.namespace is not specified. If the namespace is specified, then dataSourceRef will not be copied to dataSource.'
 properties:
 apiGroup:
 description: APIGroup is the group for the resource being referenced. If APIGroup is not specified, the specified Kind must be in the core API group. For any other third-party types, APIGroup is required.
@@ -6439,7 +7331,7 @@
 type: object
 x-kubernetes-map-type: atomic
 dataSourceRef:
- description: 'dataSourceRef specifies the object from which to populate the volume with data, if a non-empty volume is desired. This may be any local object from a non-empty API group (non core object) or a PersistentVolumeClaim object. When this field is specified, volume binding will only succeed if the type of the specified object matches some installed volume populator or dynamic provisioner. This field will replace the functionality of the DataSource field and as such if both fields are non-empty, they must have the same value. For backwards compatibility, both fields (DataSource and DataSourceRef) will be set to the same value automatically if one of them is empty and the other is non-empty. There are two important differences between DataSource and DataSourceRef: LICENSE README.md Taskfile.yml cluster default docs hack mkdocs.yml scripts talos While DataSource only allows two specific types of objects, DataSourceRef allows any non-core object, as well as PersistentVolumeClaim objects. LICENSE README.md Taskfile.yml cluster default docs hack mkdocs.yml scripts talos While DataSource ignores disallowed values (dropping them), DataSourceRef preserves all values, and generates an error if a disallowed value is specified. (Beta) Using this field requires the AnyVolumeDataSource feature gate to be enabled.'
+ description: 'dataSourceRef specifies the object from which to populate the volume with data, if a non-empty volume is desired. This may be any object from a non-empty API group (non core object) or a PersistentVolumeClaim object. When this field is specified, volume binding will only succeed if the type of the specified object matches some installed volume populator or dynamic provisioner. This field will replace the functionality of the dataSource field and as such if both fields are non-empty, they must have the same value. For backwards compatibility, when namespace isn''t specified in dataSourceRef, both fields (dataSource and dataSourceRef) will be set to the same value automatically if one of them is empty and the other is non-empty. When namespace is specified in dataSourceRef, dataSource isn''t set to the same value and must be empty. There are three important differences between dataSource and dataSourceRef: LICENSE README.md Taskfile.yml cluster default docs hack mkdocs.yml scripts talos While dataSource only allows two specific types of objects, dataSourceRef allows any non-core object, as well as PersistentVolumeClaim objects. LICENSE README.md Taskfile.yml cluster default docs hack mkdocs.yml scripts talos While dataSource ignores disallowed values (dropping them), dataSourceRef preserves all values, and generates an error if a disallowed value is specified. LICENSE README.md Taskfile.yml cluster default docs hack mkdocs.yml scripts talos While dataSource only allows local objects, dataSourceRef allows objects in any namespaces. (Beta) Using this field requires the AnyVolumeDataSource feature gate to be enabled. (Alpha) Using the namespace field of dataSourceRef requires the CrossNamespaceVolumeDataSource feature gate to be enabled.'
 properties:
 apiGroup:
 description: APIGroup is the group for the resource being referenced. If APIGroup is not specified, the specified Kind must be in the core API group. For any other third-party types, APIGroup is required.
@@ -6450,14 +7342,31 @@
 name:
 description: Name is the name of resource being referenced
 type: string
+ namespace:
+ description: Namespace is the namespace of resource being referenced Note that when a namespace is specified, a gateway.networking.k8s.io/ReferenceGrant object is required in the referent namespace to allow that namespace's owner to accept the reference. See the ReferenceGrant documentation for details. (Alpha) This field requires the CrossNamespaceVolumeDataSource feature gate to be enabled.
+ type: string
 required:
 - kind
 - name
 type: object
- x-kubernetes-map-type: atomic
 resources:
 description: 'resources represents the minimum resources the volume should have. If RecoverVolumeExpansionFailure feature is enabled users are allowed to specify resource requirements that are lower than previous value but must still be higher than capacity recorded in the status field of the claim. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources'
 properties:
+ claims:
+ description: "Claims lists the names of resources, defined in spec.resourceClaims, that are used by this container. \n This is an alpha field and requires enabling the DynamicResourceAllocation feature gate. \n This field is immutable. It can only be set for containers."
+ items:
+ description: ResourceClaim references one entry in PodSpec.ResourceClaims.
+ properties:
+ name:
+ description: Name must match the name of one entry in pod.spec.resourceClaims of the Pod where this field is used. It makes that resource available inside a container.
+ type: string
+ required:
+ - name
+ type: object
+ type: array
+ x-kubernetes-list-map-keys:
+ - name
+ x-kubernetes-list-type: map
 limits:
 additionalProperties:
 anyOf:
@@ -6474,7 +7383,7 @@
 - type: string
 pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
 x-kubernetes-int-or-string: true
- description: 'Requests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/'
+ description: 'Requests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. Requests cannot exceed Limits. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/'
 type: object
 type: object
 selector:
@@ -7091,19 +8000,17 @@
 type: object
 type:
 default: rw
- description: Which instances we must forward traffic to?
+ description: 'Type of service to forward traffic to. Default: `rw`.'
 enum:
 - rw
 - ro
 type: string
 required:
 - cluster
- - instances
 - pgbouncer
- - type
 type: object
 status:
- description: PoolerStatus defines the observed state of Pooler
+ description: 'Most recently observed status of the Pooler. This data may not be up to date. Populated by the system. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status'
 properties:
 instances:
 description: The number of pods trying to be scheduled
@@ -7158,6 +8065,9 @@
 type: object
 type: object
 type: object
+ required:
+ - metadata
+ - spec
 type: object
 served: true
 storage: true
@@ -7172,9 +8082,8 @@
 kind: CustomResourceDefinition
 metadata:
 annotations:
- controller-gen.kubebuilder.io/version: v0.9.2
+ controller-gen.kubebuilder.io/version: v0.13.0
 helm.sh/resource-policy: keep
- creationTimestamp: null
 name: scheduledbackups.postgresql.cnpg.io
 spec:
 group: postgresql.cnpg.io
@@ -7231,13 +8140,27 @@
 immediate:
 description: If the first backup has to be immediately start after creation or not
 type: boolean
+ method:
+ default: barmanObjectStore
+ description: 'The backup method to be used, possible options are `barmanObjectStore` and `volumeSnapshot`. Defaults to: `barmanObjectStore`.'
+ enum:
+ - barmanObjectStore
+ - volumeSnapshot
+ type: string
 schedule:
 description: The schedule does not follow the same format used in Kubernetes CronJobs as it includes an additional seconds specifier, see https://pkg.go.dev/github.com/robfig/cron#hdr-CRON_Expression_Format
 type: string
 suspend:
 description: If this backup is suspended or not
 type: boolean
+ target:
+ description: The policy to decide which instance should perform this backup. If empty, it defaults to `cluster.spec.backup.target`. Available options are empty string, `primary` and `prefer-standby`. `primary` to have backups run always on primary instances, `prefer-standby` to have backups run preferably on the most updated standby, if available.
+ enum:
+ - primary
+ - prefer-standby
+ type: string
 required:
+ - cluster
 - schedule
 type: object
 status:
@@ -7256,6 +8179,9 @@
 format: date-time
 type: string
 type: object
+ required:
+ - metadata
+ - spec
 type: object
 served: true
 storage: true
@@ -7404,6 +8330,7 @@
 verbs:
 - get
 - list
+ - patch
 - update
 - apiGroups:
 - admissionregistration.k8s.io
@@ -7412,6 +8339,7 @@
 verbs:
 - get
 - list
+ - patch
 - update
 - apiGroups:
 - apiextensions.k8s.io
@@ -7591,6 +8519,62 @@
 - patch
 - update
 - watch
+ - apiGroups:
+ - snapshot.storage.k8s.io
+ resources:
+ - volumesnapshots
+ verbs:
+ - create
+ - get
+ - list
+ - patch
+ - watch
+---
+# Source: cloudnative-pg/templates/rbac.yaml
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+ name: cloudnative-pg-view
+ labels:
+ app.kubernetes.io/name: cloudnative-pg
+ app.kubernetes.io/instance: cloudnative-pg
+ app.kubernetes.io/managed-by: Helm
+rules:
+ - apiGroups:
+ - postgresql.cnpg.io
+ resources:
+ - backups
+ - clusters
+ - poolers
+ - scheduledbackups
+ verbs:
+ - get
+ - list
+ - watch
+---
+# Source: cloudnative-pg/templates/rbac.yaml
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+ name: cloudnative-pg-edit
+ labels:
+ app.kubernetes.io/name: cloudnative-pg
+ app.kubernetes.io/instance: cloudnative-pg
+ app.kubernetes.io/managed-by: Helm
+rules:
+ - apiGroups:
+ - postgresql.cnpg.io
+ resources:
+ - backups
+ - clusters
+ - poolers
+ - scheduledbackups
+ verbs:
+ - create
+ - delete
+ - deletecollection
+ - patch
+ - update
 ---
 # Source: cloudnative-pg/templates/rbac.yaml
 apiVersion: rbac.authorization.k8s.io/v1
@@ -7661,20 +8645,21 @@
 - /manager
 env:
 - name: OPERATOR_IMAGE_NAME
- value: "ghcr.io/cloudnative-pg/cloudnative-pg:1.18.1"
+ value: "ghcr.io/cloudnative-pg/cloudnative-pg:1.21.0"
 - name: OPERATOR_NAMESPACE
 valueFrom:
 fieldRef:
 fieldPath: metadata.namespace
 - name: MONITORING_QUERIES_CONFIGMAP
 value: "cnpg-default-monitoring"
- image: "ghcr.io/cloudnative-pg/cloudnative-pg:1.18.1"
+ image: "ghcr.io/cloudnative-pg/cloudnative-pg:1.21.0"
 imagePullPolicy: IfNotPresent
 livenessProbe:
 httpGet:
 path: /readyz
 port: 9443
 scheme: HTTPS
+ initialDelaySeconds: 3
 name: manager
 ports:
 - containerPort: 8080
@@ -7688,15 +8673,18 @@
 path: /readyz
 port: 9443
 scheme: HTTPS
+ initialDelaySeconds: 3
 resources: {}
 securityContext:
 allowPrivilegeEscalation: false
- readOnlyRootFilesystem: true
- runAsUser: 10001
- runAsGroup: 10001
 capabilities:
 drop:
- - "ALL"
+ - ALL
+ readOnlyRootFilesystem: true
+ runAsGroup: 10001
+ runAsUser: 10001
+ seccompProfile:
+ type: RuntimeDefault
 volumeMounts:
 - mountPath: /controller
 name: scratch-data
@@ -7844,7 +8832,7 @@
 path: /mutate-postgresql-cnpg-io-v1-backup
 port: 443
 failurePolicy: Fail
- name: mbackup.kb.io
+ name: mbackup.cnpg.io
 rules:
 - apiGroups:
 - postgresql.cnpg.io
@@ -7865,7 +8853,7 @@
 path: /mutate-postgresql-cnpg-io-v1-cluster
 port: 443
 failurePolicy: Fail
- name: mcluster.kb.io
+ name: mcluster.cnpg.io
 rules:
 - apiGroups:
 - postgresql.cnpg.io
@@ -7886,7 +8874,7 @@
 path: /mutate-postgresql-cnpg-io-v1-scheduledbackup
 port: 443
 failurePolicy: Fail
- name: mscheduledbackup.kb.io
+ name: mscheduledbackup.cnpg.io
 rules:
 - apiGroups:
 - postgresql.cnpg.io
@@ -7918,7 +8906,7 @@
 path: /validate-postgresql-cnpg-io-v1-backup
 port: 443
 failurePolicy: Fail
- name: vbackup.kb.io
+ name: vbackup.cnpg.io
 rules:
 - apiGroups:
 - postgresql.cnpg.io
@@ -7939,7 +8927,7 @@
 path: /validate-postgresql-cnpg-io-v1-cluster
 port: 443
 failurePolicy: Fail
- name: vcluster.kb.io
+ name: vcluster.cnpg.io
 rules:
 - apiGroups:
 - postgresql.cnpg.io
@@ -7960,7 +8948,7 @@
 path: /validate-postgresql-cnpg-io-v1-scheduledbackup
 port: 443
 failurePolicy: Fail
- name: vscheduledbackup.kb.io
+ name: vscheduledbackup.cnpg.io
 rules:
 - apiGroups:
 - postgresql.cnpg.io
@@ -7981,7 +8969,7 @@
 path: /validate-postgresql-cnpg-io-v1-pooler
 port: 443
 failurePolicy: Fail
- name: vpooler.kb.io
+ name: vpooler.cnpg.io
 rules:
 - apiGroups:
 - postgresql.cnpg.io
@@ -7993,38 +8981,3 @@
 resources:
 - poolers
 sideEffects: None
----
-# Source: cloudnative-pg/templates/tests/test-connection.yaml
-#
-# Copyright The CloudNativePG Contributors
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-apiVersion: v1
-kind: Pod
-metadata:
- name: "cloudnative-pg-test-connection"
- labels:
- app.kubernetes.io/name: cloudnative-pg
- app.kubernetes.io/instance: cloudnative-pg
- app.kubernetes.io/managed-by: Helm
- annotations:
- "helm.sh/hook": test
-spec:
- containers:
- - name: wget
- image: 'busybox:latest'
- imagePullPolicy: IfNotPresent
- command: ['curl']
- args: ['-ki', 'https://cnpg-webhook-service:443']
- restartPolicy: Never

@github-advanced-security
Copy link

This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation.

@chii-bot
Copy link
Contributor Author

chii-bot bot commented Jun 13, 2023

MegaLinter status: ❌ ERROR

Descriptor Linter Files Fixed Errors Elapsed time
❌ COPYPASTE jscpd yes 2 0.96s
✅ REPOSITORY git_diff yes no 0.02s
✅ REPOSITORY secretlint yes no 1.2s
✅ YAML prettier 1 0 0.48s
✅ YAML yamllint 1 0 0.12s

See errors details in artifact MegaLinter reports on CI Job page
Set VALIDATE_ALL_CODEBASE: true in mega-linter.yml to validate all sources, not only the diff

@chii-bot chii-bot bot changed the title feat(helm): update chart cloudnative-pg to 0.18.1 feat(helm): update chart cloudnative-pg to 0.18.2 Jul 27, 2023
@chii-bot chii-bot bot force-pushed the renovate/cloudnative-pg-0.x branch from 0125869 to fb2c744 Compare July 27, 2023 14:13
@chii-bot chii-bot bot changed the title feat(helm): update chart cloudnative-pg to 0.18.2 feat(helm): update chart cloudnative-pg to 0.19.0 Oct 19, 2023
@chii-bot chii-bot bot force-pushed the renovate/cloudnative-pg-0.x branch from fb2c744 to 8c121a6 Compare October 19, 2023 11:14
@chii-bot chii-bot bot changed the title feat(helm): update chart cloudnative-pg to 0.19.0 feat(helm): update chart cloudnative-pg to 0.19.1 Nov 3, 2023
@chii-bot chii-bot bot force-pushed the renovate/cloudnative-pg-0.x branch from 8c121a6 to 131646f Compare November 3, 2023 15:17
@chii-bot chii-bot bot force-pushed the renovate/cloudnative-pg-0.x branch from 131646f to 91f0521 Compare December 21, 2023 14:14
@chii-bot chii-bot bot changed the title feat(helm): update chart cloudnative-pg to 0.19.1 feat(helm): update chart cloudnative-pg to 0.20.0 Dec 21, 2023
@chii-bot chii-bot bot changed the title feat(helm): update chart cloudnative-pg to 0.20.0 feat(helm): update chart cloudnative-pg to 0.20.1 Feb 5, 2024
@chii-bot chii-bot bot force-pushed the renovate/cloudnative-pg-0.x branch from 91f0521 to cfafa20 Compare February 5, 2024 12:26
@chii-bot chii-bot bot force-pushed the renovate/cloudnative-pg-0.x branch from cfafa20 to dca8571 Compare March 14, 2024 18:19
@chii-bot chii-bot bot changed the title feat(helm): update chart cloudnative-pg to 0.20.1 feat(helm): update chart cloudnative-pg to 0.20.2 Mar 14, 2024
@chii-bot chii-bot bot force-pushed the renovate/cloudnative-pg-0.x branch from dca8571 to e5e1a40 Compare April 25, 2024 12:24
@chii-bot chii-bot bot changed the title feat(helm): update chart cloudnative-pg to 0.20.2 feat(helm): update chart cloudnative-pg to 0.21.0 Apr 25, 2024
@chii-bot chii-bot bot changed the title feat(helm): update chart cloudnative-pg to 0.21.0 feat(helm): update chart cloudnative-pg to 0.21.1 Apr 27, 2024
@chii-bot chii-bot bot force-pushed the renovate/cloudnative-pg-0.x branch from e5e1a40 to f6bea0b Compare April 27, 2024 15:14
@chii-bot chii-bot bot changed the title feat(helm): update chart cloudnative-pg to 0.21.1 feat(helm): update chart cloudnative-pg to 0.21.2 Apr 30, 2024
@chii-bot chii-bot bot force-pushed the renovate/cloudnative-pg-0.x branch from f6bea0b to 137155a Compare April 30, 2024 14:15
@chii-bot chii-bot bot force-pushed the renovate/cloudnative-pg-0.x branch from 137155a to 565bf93 Compare May 30, 2024 10:17
@chii-bot chii-bot bot changed the title feat(helm): update chart cloudnative-pg to 0.21.2 feat(helm): update chart cloudnative-pg to 0.21.3 May 30, 2024
@chii-bot chii-bot bot force-pushed the renovate/cloudnative-pg-0.x branch from 565bf93 to 2bfb5dc Compare May 30, 2024 18:22
@chii-bot chii-bot bot changed the title feat(helm): update chart cloudnative-pg to 0.21.3 feat(helm): update chart cloudnative-pg to 0.21.4 May 30, 2024
@chii-bot chii-bot bot force-pushed the renovate/cloudnative-pg-0.x branch from 2bfb5dc to 7bb11fc Compare June 13, 2024 14:16
@chii-bot chii-bot bot changed the title feat(helm): update chart cloudnative-pg to 0.21.4 feat(helm): update chart cloudnative-pg to 0.21.5 Jun 13, 2024
@github-advanced-security
Copy link

This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation.

@chii-bot chii-bot bot force-pushed the renovate/cloudnative-pg-0.x branch from 7bb11fc to 747e6e0 Compare July 30, 2024 12:32
@chii-bot chii-bot bot changed the title feat(helm): update chart cloudnative-pg to 0.21.5 feat(helm): update chart cloudnative-pg to 0.21.6 Jul 30, 2024
@chii-bot chii-bot bot changed the title feat(helm): update chart cloudnative-pg to 0.21.6 feat(helm): update chart cloudnative-pg to 0.22.0 Aug 22, 2024
@chii-bot chii-bot bot force-pushed the renovate/cloudnative-pg-0.x branch from 747e6e0 to 4c1227d Compare August 22, 2024 16:23
| datasource | package        | from   | to     |
| ---------- | -------------- | ------ | ------ |
| helm       | cloudnative-pg | 0.16.1 | 0.22.1 |
@chii-bot chii-bot bot changed the title feat(helm): update chart cloudnative-pg to 0.22.0 feat(helm): update chart cloudnative-pg to 0.22.1 Oct 17, 2024
@chii-bot chii-bot bot force-pushed the renovate/cloudnative-pg-0.x branch from 4c1227d to 6802dfe Compare October 17, 2024 12:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area/cluster Changes made in the cluster directory renovate/helm size/XS Denotes a PR that changes 0-9 lines, ignoring generated files. type/minor
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants