Release edb-postgres-for-kubernetes-v0.19.0 (#122)

Signed-off-by: Niccolò Fei <[email protected]> Co-authored-by: Niccolò Fei <[email protected]>
EnterpriseDB · Oct 18, 2023 · ddcbd17 · ddcbd17
1 parent eba5cce
commit ddcbd17
Show file tree

Hide file tree

Showing 8 changed files with 320 additions and 134 deletions.
diff --git a/charts/edb-postgres-for-kubernetes/Chart.yaml b/charts/edb-postgres-for-kubernetes/Chart.yaml
@@ -17,12 +17,12 @@ name: edb-postgres-for-kubernetes
 description: EDB Postgres for Kubernetes Helm Chart
 icon: https://www.enterprisedb.com/themes/custom/edb_bootstrap_sass/edb-logo-disc-dark-2.svg
 type: application
-version: "0.18.3"
+version: "0.19.0"
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to
 # follow Semantic Versioning. They should reflect the version the application is using.
 # It is recommended to use it with quotes.
-appVersion: "1.20.2"
+appVersion: "1.21.0"
 sources:
   - https://github.com/EnterpriseDB/edb-postgres-for-kubernetes-charts
 keywords:

diff --git a/charts/edb-postgres-for-kubernetes/README.md b/charts/edb-postgres-for-kubernetes/README.md
diff --git a/charts/edb-postgres-for-kubernetes/templates/crds/crds.yaml b/charts/edb-postgres-for-kubernetes/templates/crds/crds.yaml
diff --git a/charts/edb-postgres-for-kubernetes/templates/mutatingwebhookconfiguration.yaml b/charts/edb-postgres-for-kubernetes/templates/mutatingwebhookconfiguration.yaml
@@ -34,7 +34,7 @@ webhooks:
       path: /mutate-postgresql-k8s-enterprisedb-io-v1-backup
       port: {{ .Values.service.port }}
   failurePolicy: {{ .Values.webhook.mutating.failurePolicy }}
-  name: mbackup.kb.io
+  name: mbackup.k8s.enterprisedb.io
   rules:
   - apiGroups:
     - postgresql.k8s.enterprisedb.io
@@ -55,7 +55,7 @@ webhooks:
       path: /mutate-postgresql-k8s-enterprisedb-io-v1-cluster
       port: {{ .Values.service.port }}
   failurePolicy: {{ .Values.webhook.mutating.failurePolicy }}
-  name: mcluster.kb.io
+  name: mcluster.k8s.enterprisedb.io
   rules:
   - apiGroups:
     - postgresql.k8s.enterprisedb.io
@@ -76,7 +76,7 @@ webhooks:
       path: /mutate-postgresql-k8s-enterprisedb-io-v1-scheduledbackup
       port: {{ .Values.service.port }}
   failurePolicy: {{ .Values.webhook.mutating.failurePolicy }}
-  name: mscheduledbackup.kb.io
+  name: mscheduledbackup.k8s.enterprisedb.io
   rules:
   - apiGroups:
     - postgresql.k8s.enterprisedb.io

diff --git a/charts/edb-postgres-for-kubernetes/templates/rbac.yaml b/charts/edb-postgres-for-kubernetes/templates/rbac.yaml
@@ -134,13 +134,13 @@ rules:
   - update
   - watch
 - apiGroups:
-    - ""
+  - ""
   resources:
-    - secrets/status
+  - secrets/status
   verbs:
-    - get
-    - patch
-    - update
+  - get
+  - patch
+  - update
 - apiGroups:
   - ""
   resources:
@@ -191,17 +191,17 @@ rules:
   - list
   - update
 - apiGroups:
-    - apps
+  - apps
   resources:
-    - deployments
+  - deployments
   verbs:
-    - create
-    - delete
-    - get
-    - list
-    - patch
-    - update
-    - watch
+  - create
+  - delete
+  - get
+  - list
+  - patch
+  - update
+  - watch
 - apiGroups:
   - batch
   resources:
@@ -287,32 +287,32 @@ rules:
   resources:
   - clusters/status
   verbs:
-    - get
-    - patch
-    - update
-    - watch
+  - get
+  - patch
+  - update
+  - watch
 - apiGroups:
-    - postgresql.k8s.enterprisedb.io
+  - postgresql.k8s.enterprisedb.io
   resources:
-    - poolers
+  - poolers
   verbs:
-    - create
-    - delete
-    - get
-    - list
-    - patch
-    - update
-    - watch
+  - create
+  - delete
+  - get
+  - list
+  - patch
+  - update
+  - watch
 - apiGroups:
-    - postgresql.k8s.enterprisedb.io
+  - postgresql.k8s.enterprisedb.io
   resources:
-    - poolers/finalizers
+  - poolers/finalizers
   verbs:
-    - update
+  - update
 - apiGroups:
-    - postgresql.k8s.enterprisedb.io
+  - postgresql.k8s.enterprisedb.io
   resources:
-    - poolers/status
+  - poolers/status
   verbs:
   - get
   - patch
@@ -360,6 +360,16 @@ rules:
   - patch
   - update
   - watch
+- apiGroups:
+  - snapshot.storage.k8s.io
+  resources:
+  - volumesnapshots
+  verbs:
+  - create
+  - get
+  - list
+  - patch
+  - watch
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding

diff --git a/charts/edb-postgres-for-kubernetes/templates/validatingwebhookconfiguration.yaml b/charts/edb-postgres-for-kubernetes/templates/validatingwebhookconfiguration.yaml
@@ -34,7 +34,7 @@ webhooks:
       path: /validate-postgresql-k8s-enterprisedb-io-v1-backup
       port: {{ .Values.service.port }}
   failurePolicy: {{ .Values.webhook.validating.failurePolicy }}
-  name: vbackup.kb.io
+  name: vbackup.k8s.enterprisedb.io
   rules:
   - apiGroups:
     - postgresql.k8s.enterprisedb.io
@@ -55,7 +55,7 @@ webhooks:
       path: /validate-postgresql-k8s-enterprisedb-io-v1-cluster
       port: {{ .Values.service.port }}
   failurePolicy: {{ .Values.webhook.validating.failurePolicy }}
-  name: vcluster.kb.io
+  name: vcluster.k8s.enterprisedb.io
   rules:
   - apiGroups:
     - postgresql.k8s.enterprisedb.io
@@ -76,7 +76,7 @@ webhooks:
       path: /validate-postgresql-k8s-enterprisedb-io-v1-scheduledbackup
       port: {{ .Values.service.port }}
   failurePolicy: {{ .Values.webhook.validating.failurePolicy }}
-  name: vscheduledbackup.kb.io
+  name: vscheduledbackup.k8s.enterprisedb.io
   rules:
   - apiGroups:
     - postgresql.k8s.enterprisedb.io
@@ -97,7 +97,7 @@ webhooks:
       path: /validate-postgresql-k8s-enterprisedb-io-v1-pooler
       port: {{ .Values.service.port }}
   failurePolicy: {{ .Values.webhook.validating.failurePolicy }}
-  name: vpooler.kb.io
+  name: vpooler.k8s.enterprisedb.io
   rules:
     - apiGroups:
         - postgresql.k8s.enterprisedb.io

diff --git a/charts/edb-postgres-for-kubernetes/values.schema.json b/charts/edb-postgres-for-kubernetes/values.schema.json
@@ -53,6 +53,14 @@
                 },
                 "runAsUser": {
                     "type": "integer"
+                },
+                "seccompProfile": {
+                    "type": "object",
+                    "properties": {
+                        "type": {
+                            "type": "string"
+                        }
+                    }
                 }
             }
         },

diff --git a/charts/edb-postgres-for-kubernetes/values.yaml b/charts/edb-postgres-for-kubernetes/values.yaml
@@ -91,6 +91,8 @@ containerSecurityContext:
   readOnlyRootFilesystem: true
   runAsUser: 10001
   runAsGroup: 10001
+  seccompProfile:
+    type: RuntimeDefault
   capabilities:
     drop:
       - "ALL"
@@ -245,14 +247,16 @@ monitoringQueriesConfigMap:
             description: "Time at which postgres started (based on epoch)"
 
     pg_replication:
-      query: "SELECT CASE WHEN NOT pg_catalog.pg_is_in_recovery()
+      query: "SELECT CASE WHEN (
+                NOT pg_catalog.pg_is_in_recovery()
+                OR pg_catalog.pg_last_wal_receive_lsn() = pg_catalog.pg_last_wal_replay_lsn())
               THEN 0
               ELSE GREATEST (0,
                 EXTRACT(EPOCH FROM (now() - pg_catalog.pg_last_xact_replay_timestamp())))
               END AS lag,
               pg_catalog.pg_is_in_recovery() AS in_recovery,
               EXISTS (TABLE pg_stat_wal_receiver) AS is_wal_receiver_up,
-              (SELECT count(*) FROM pg_stat_replication) AS streaming_replicas"
+              (SELECT count(*) FROM pg_catalog.pg_stat_replication) AS streaming_replicas"
       metrics:
         - lag:
             usage: "GAUGE"
@@ -273,7 +277,10 @@ monitoringQueriesConfigMap:
           slot_type,
           database,
           active,
-          pg_catalog.pg_wal_lsn_diff(pg_catalog.pg_current_wal_lsn(), restart_lsn)
+          (CASE pg_catalog.pg_is_in_recovery()
+            WHEN TRUE THEN pg_catalog.pg_wal_lsn_diff(pg_catalog.pg_last_wal_receive_lsn(), restart_lsn)
+            ELSE pg_catalog.pg_wal_lsn_diff(pg_catalog.pg_current_wal_lsn(), restart_lsn)
+          END) as pg_wal_lsn_diff
         FROM pg_catalog.pg_replication_slots
         WHERE NOT temporary
       metrics:
@@ -454,6 +461,7 @@ monitoringQueriesConfigMap:
        SELECT usename
          , COALESCE(application_name, '') AS application_name
          , COALESCE(client_addr::text, '') AS client_addr
+         , COALESCE(client_port::text, '') AS client_port
          , EXTRACT(EPOCH FROM backend_start) AS backend_start
          , COALESCE(pg_catalog.age(backend_xmin), 0) AS backend_xmin_age
          , pg_catalog.pg_wal_lsn_diff(pg_catalog.pg_current_wal_lsn(), sent_lsn) AS sent_diff_bytes
@@ -474,6 +482,9 @@ monitoringQueriesConfigMap:
         - client_addr:
             usage: "LABEL"
             description: "Client IP address"
+        - client_port:
+            usage: "LABEL"
+            description: "Client TCP port"
         - backend_start:
             usage: "COUNTER"
             description: "Time when this process was started"