Release notes

v0.1.14

Summary

Fix PostgreSQL pod placement for Ignored topology and update module dependencies and base images.

Highlights

Node separation in Ignored mode is a preference, not a mandatory constraint: pods can still share a node when necessary. Other topology modes retain their existing rules.

Fixes

• PostgreSQL clusters using Ignored topology now provide the scheduler with the missing preference to place instances on different nodes.

v0.1.13

Summary

Postgres and PostgresClass now support API v1alpha2 as their storage version.

PostgreSQL 15, 16, 17 and 18 are now available when creating a database cluster.

Highlights

Existing v1alpha1 manifests remain supported. When switching a manifest to v1alpha2, use percentage strings such as “50%” for CPU fractions and ReadOnly, ReadWrite or Monitoring for user roles. PostgreSQL permissions remain unchanged.

Upgrading the module updates existing PostgreSQL 17 clusters from 17.6 to 17.11 and restarts their pods.

New features

• Select the major version using spec.version at creation time; the default is 17. Changing the major version of an existing resource is not supported. The supplied minor versions are 15.19, 16.15, 17.11 and 18.6.

Improvements

• PostgreSQL major version selection is preserved when converting resources between API versions and recording snapshot metadata.
• Snapshot restore requires the same PostgreSQL major version as the source snapshot, preventing startup with an incompatible data directory. Snapshots without a recorded version can be restored as PostgreSQL 17.

Fixes

• Fix loading of the uuid-ossp extension in distroless PostgreSQL images.

v0.1.12

Summary

Faster replica join for Postgres clusters. Adding a replica no longer waits for a slow checkpoint on the primary.

Highlights

• Replica join is up to minutes faster, most noticeably when adding a replica to a busy live cluster

v0.1.11

Improvements

• Added the ability to choose the MD5 password encryption mode for a specific user (SCRAM-SHA-256 by default).
• Reworked the local database name check: names must now match the Secret/ConfigMap key pattern [._a-zA-Z0-9] instead of an RFC 1123 DNS label (lowercase [a-z0-9] only).
• Preparatory release for the API version increment and the introduction of conversions.

Fixes

• Reworked the automatic password generation approach: with GitOps, hashes are no longer mutated needlessly.
• CVE fixes.

v0.1.10

WARNING! Updating the module to this version restarts all pods managed by the managed-postgres module!

Fixes

• Fixed a bug where, on a configuration update, a cluster in Consistency and ConsistencyAndAvailability modes could deadlock and be left without a master.

v0.1.9

Improvements

• Service Monitoring support with 3 modes: Enabled, EnabledWithoutAlerts, Disabled.

Fixes

• Updated the resource roles in accordance with RBAC v1.
• Documentation fixes.

Miscellaneous

• Updated go to 1.26.3.
• CVE fixes.

v0.1.8

Improvements

• Service Monitoring support with 3 modes: Enabled, EnabledWithoutAlerts, Disabled.

Fixes

• Updated the resource roles in accordance with RBAC v1.
• Documentation fixes.

Miscellaneous

• Updated go to 1.26.3.
• CVE fixes.

v0.1.7

Hot-fix.

Fixes

• Fixed an issue where password auto-generation was triggered on any CR update.

v0.1.6

WARNING! Updating the module to this version restarts all pods managed by the managed-postgres module!

Improvements

• Added/tweaked various internal settings of the replication modes (Availability, Consistency, ConsistencyAndAvailability) to improve the user experience (see the documentation for details).
• Automatic user password generation if users[].password is not set and users[].storeCredsToSecret: true is set.

Fixes

• The spec.sizingPolicies.coreFractions field in PostgresClass is now required.
• PG pods now start with priorityClassName: production-high (was develop).

Miscellaneous

• The flant user and the database of the same name, previously created by default, were removed from newly created Postgres resources.
• Fixed several CVEs.
• Updated go to 1.25.9 (was 1.25.7).

v0.1.5

Fixes

• Reconcile now works correctly when it was interrupted midway (for example, because of an error).
• PostgresClass auto-discovery now works correctly when the PostgresClass was created later than the Postgres resource that uses it.
• A couple of minor fixes in the PostgresClass CRD (enums for spec.overridableConfigurations, spec.topology.defaultTopology).

v0.1.4

WARNING! Updating the module to this version restarts all pods managed by the managed-postgres module!

Improvements

• Updated the underlying CNPG operator to version 1.28.1 (was 1.26.0).
• Added support for monitoring Postgres clusters by the DOP agent.

Fixes

• Fixed the DSN format in secrets: the obsolete pgsql:host=%s;port=5432;dbname=%s;user=%s;password=%s was replaced with the modern postgresql://<user>:<password>@<host>:<port>/<db-name>.

Miscellaneous

• Updated go to 1.25.7 (was 1.24.11).
• Added several managed-services.deckhouse.io/* labels to Postgres pods.

v0.1.3

Release to SE and SE+.

WARNING! Updating the module to this version restarts all pods managed by the managed-postgres module!

Improvements

• Added the host key to the DSN secret so that there is no need to parse the DSN when only the PG instance host is needed.

Fixes

• The sizingPolicies.memory.step parameter is now required in PostgresClass.
• Added validation of database and user names against the Kubernetes requirements for object names.
• Operator pods are now placed on system nodes (if the cluster has any). See the Deckhouse documentation for details.
• Updated base-images to v0.5.49 (was v0.5.33).
• Rebuilt pg-images (only the base-images version was updated).

v0.1.2

Fixes

• Fixed links in the documentation.
• Removed unused/redundant rules from the operator RBAC role.

v0.1.1

Improvements

• Restore from PostgresSnapshot.
• TLS.

v0.1.0

Release to EE.

Improvements

• Postgres Snapshots.
• E2E test coverage of the functionality.

Fixes

• Removed redundant nesting in PostgresClass affinity -> nodeAffinity.

v0.0.13

Fixes

• Fixed a bug where nodeSelector, Tolerations and Affinity settings were not removed from the cnpg resource although they became empty in the class.
• Fixed a bug where the webhook failed on Scheduling validation in Standalone mode.
• Renamed the operator deployment.
• Fixed PostgresClass validation examples.
• Refactored the CI process.
• Fixed Standalone mode.

v0.0.12

Fixes

• Removed the dependency on dop from the cluster.
• Topology settings validation moved to a webhook.
• Fixed behavior that prevented changing the Postgres config because of an image update.
• Moved the build of base postgres images into a separate repository to decouple base image updates from the module.
• Default postgres version is 17.6.
• Minor bug fixes.
• Documentation fixes.