Repository navigation
Update Helm release cloudnative-pg to v0.29.1 - #353
Merged
Merged
Conversation
Argo CD Diff PreviewSummary: Modified (1):
± sandbox-oci-cnpg (+489|-58)sandbox-oci-cnpg (applications/appset-ops-tools.yaml)Deployment: cnpg-system/cnpg-cloudnative-pg metadata:
annotations:
- checksum/config: adaf2088314edce78386c032b81e9bb7b7a4458fa1d07f9acec291635ce3d0c9
- checksum/monitoring-config: 937b417a0e539de045c05995b5820573504860c9a1a92d1e5c9ba132a76d3517
- checksum/rbac: 8660100663791cf32738e2f096691c89561389c9c17f449da0134efd0747710f
+ checksum/config: 8fadd17362038f4209ee6ab7acbefab66e31935f337ef6dcaaf630ef4931cc48
+ checksum/monitoring-config: cbf85fe402a3dab88cead08d8af602489baee82063c2694296f4fc8166dbd9bf
+ checksum/rbac: da9fa6d9f72cb77491623998262b6a5e05def7ebd5ab8d29c72d0e32b61721e6
labels:
app.kubernetes.io/instance: cnpg
app.kubernetes.io/name: cloudnative-pg
@@ skipped 9 lines (31 -> 39) @@
- /manager
env:
- name: OPERATOR_IMAGE_NAME
- value: ghcr.io/cloudnative-pg/cloudnative-pg:1.30.0
+ value: ghcr.io/cloudnative-pg/cloudnative-pg:1.30.1
- name: OPERATOR_NAMESPACE
valueFrom:
fieldRef:
fieldPath: metadata.namespace
- name: MONITORING_QUERIES_CONFIGMAP
value: cnpg-default-monitoring
- image: ghcr.io/cloudnative-pg/cloudnative-pg:1.30.0
+ image: ghcr.io/cloudnative-pg/cloudnative-pg:1.30.1
imagePullPolicy: IfNotPresent
livenessProbe:
httpGet:CustomResourceDefinition: backups.postgresql.cnpg.io kind: CustomResourceDefinition
metadata:
annotations:
- controller-gen.kubebuilder.io/version: v0.21.0
+ controller-gen.kubebuilder.io/version: v0.22.0
helm.sh/resource-policy: keep
name: backups.postgresql.cnpg.io
spec:CustomResourceDefinition: clusterimagecatalogs.postgresql.cnpg.io kind: CustomResourceDefinition
metadata:
annotations:
- controller-gen.kubebuilder.io/version: v0.21.0
+ controller-gen.kubebuilder.io/version: v0.22.0
helm.sh/resource-policy: keep
name: clusterimagecatalogs.postgresql.cnpg.io
spec:CustomResourceDefinition: clusters.postgresql.cnpg.io kind: CustomResourceDefinition
metadata:
annotations:
- controller-gen.kubebuilder.io/version: v0.21.0
+ controller-gen.kubebuilder.io/version: v0.22.0
helm.sh/resource-policy: keep
name: clusters.postgresql.cnpg.io
spec:
@@ skipped 1175 lines (9 -> 1183) @@
format: int32
minimum: 1
type: integer
+ restoreAdditionalCommandArgs:
+ description: |-
+ Additional arguments that can be appended to the 'barman-cloud-restore'
+ command-line invocation. These arguments provide flexibility to customize
+ the data restore process further, according to specific requirements or
+ configurations.
+
+ Example:
+ In a scenario where specialized restore options are required, such as setting
+ a specific read timeout or defining custom behavior, users can use this field
+ to specify additional command arguments.
+
+ Note:
+ It's essential to ensure that the provided arguments are valid and supported
+ by the 'barman-cloud-restore' command, to avoid potential errors or unintended
+ behavior during execution.
+ items:
+ type: string
+ type: array
type: object
destinationPath:
description: |-
@@ skipped 318 lines (1209 -> 1526) @@
type: string
dataChecksums:
description: |-
- Whether the `-k` option should be passed to initdb,
- enabling checksums on data pages (default: `false`)
+ Whether data checksums are enabled on data pages, to help detect
+ corruption by the I/O system that would otherwise be silent
+ (default: `false` before PostgreSQL 18, `true` from PostgreSQL 18 on,
+ matching the initdb default in each case).
type: boolean
database:
description: 'Name of the database used by the application.
@@ skipped 686 lines (1539 -> 2224) @@
description: Selects a key of a ConfigMap.
properties:
key:
- description: The key to select.
+ description: |-
+ The key to select from the ConfigMap's Data field.
+ Keys in the BinaryData field are not currently propagated to container env vars.
type: string
name:
default: ""
@@ skipped 224 lines (2235 -> 2458) @@
* An existing PVC (PersistentVolumeClaim)
If the provisioner or an external controller can support the specified data source,
it will create a new volume based on the contents of the specified data source.
- When the AnyVolumeDataSource feature gate is enabled, dataSource contents will be copied to dataSourceRef,
- and dataSourceRef contents will be copied to dataSource when dataSourceRef.namespace is not specified.
+ dataSource contents will be copied to dataSourceRef, and dataSourceRef contents will be
+ copied to dataSource when dataSourceRef.namespace is not specified.
If the namespace is specified, then dataSourceRef will not be copied to dataSource.
properties:
apiGroup:
@@ skipped 36 lines (2469 -> 2504) @@
specified.
* While dataSource only allows local objects, dataSourceRef allows objects
in any namespaces.
- (Beta) Using this field requires the AnyVolumeDataSource feature gate to be enabled.
(Alpha) Using the namespace field of dataSourceRef requires the CrossNamespaceVolumeDataSource feature gate to be enabled.
properties:
apiGroup:
@@ skipped 293 lines (2512 -> 2804) @@
format: int32
minimum: 1
type: integer
+ restoreAdditionalCommandArgs:
+ description: |-
+ Additional arguments that can be appended to the 'barman-cloud-restore'
+ command-line invocation. These arguments provide flexibility to customize
+ the data restore process further, according to specific requirements or
+ configurations.
+
+ Example:
+ In a scenario where specialized restore options are required, such as setting
+ a specific read timeout or defining custom behavior, users can use this field
+ to specify additional command arguments.
+
+ Note:
+ It's essential to ensure that the provided arguments are valid and supported
+ by the 'barman-cloud-restore' command, to avoid potential errors or unintended
+ behavior during execution.
+ items:
+ type: string
+ type: array
type: object
destinationPath:
description: |-
@@ skipped 1136 lines (2830 -> 3965) @@
Only applicable when the action is `HashMod`.
format: int64
+ minimum: 0
type: integer
regex:
description: regex defines the regular expression against
@@ skipped 85 lines (3973 -> 4057) @@
Only applicable when the action is `HashMod`.
format: int64
+ minimum: 0
type: integer
regex:
description: regex defines the regular expression against
@@ skipped 190 lines (4065 -> 4254) @@
Eligible volumes are in-tree FibreChannel and iSCSI volumes, and all CSI volumes
whose CSI driver announces SELinux support by setting spec.seLinuxMount: true in their
CSIDriver instance. Other volumes are always re-labelled recursively.
- "MountOption" value is allowed only when SELinuxMount feature gate is enabled.
- If not specified and SELinuxMount feature gate is enabled, "MountOption" is used.
- If not specified and SELinuxMount feature gate is disabled, "MountOption" is used for ReadWriteOncePod volumes
- and "Recursive" for all other volumes.
+ If not specified, "MountOption" is used.
This field affects only Pods that have SELinux label set, either in PodSecurityContext or in SecurityContext of all containers.
@@ skipped 634 lines (4267 -> 4900) @@
isolationCheck:
description: |-
Configure the feature that extends the liveness probe for a primary
- instance. In addition to the basic checks, this verifies whether the
+ instance. In addition to the basic checks, this reports whether the
primary is isolated from the Kubernetes API server and from its
- replicas, ensuring that it can be safely shut down if network
- partition or API unavailability is detected. Enabled by default.
+ replicas, so the kubelet restarts it through the normal
+ container-termination path (a smart shutdown, bounded by
+ `.spec.smartShutdownTimeout`) when a network partition or API
+ unavailability is detected. Enabled by default.
properties:
connectionTimeout:
default: 1000
@@ skipped 187 lines (4916 -> 5102) @@
mode, like fsGroup, and the result can be other mode bits set.
format: int32
type: integer
+ defaultUser:
+ description: |-
+ defaultUser is Optional: The owner UID of the created files by default.
+ The defaultUser field is only used as a fallback when the item-level user field is unset.
+ (Alpha) This field requires the AtomicWriteVolumeUserFields feature gate to be enabled.
+ format: int64
+ type: integer
sources:
description: |-
sources is the list of volume projections. Each entry in this list
@@ skipped 92 lines (5116 -> 5207) @@
Mutually-exclusive with name. The contents of all selected
ClusterTrustBundles will be unified and deduplicated.
type: string
+ user:
+ description: |-
+ user is Optional: The owner UID of the created file.
+ If specified, the item-level user field takes precedence over defaultUser.
+ (Alpha) This field requires the AtomicWriteVolumeUserFields feature gate to be enabled.
+ format: int64
+ type: integer
required:
- path
type: object
@@ skipped 34 lines (5221 -> 5254) @@
May not contain the path element '..'.
May not start with the string '..'.
type: string
+ user:
+ description: |-
+ user is Optional: The owner UID of the created file.
+ If specified, the item-level user field takes precedence over defaultUser.
+ (Alpha) This field requires the AtomicWriteVolumeUserFields feature gate to be enabled.
+ format: int64
+ type: integer
required:
- key
- path
@@ skipped 83 lines (5268 -> 5350) @@
- resource
type: object
x-kubernetes-map-type: atomic
+ user:
+ description: |-
+ user is Optional: The owner UID of the created file.
+ If specified, the item-level user field takes precedence over defaultUser.
+ (Alpha) This field requires the AtomicWriteVolumeUserFields feature gate to be enabled.
+ format: int64
+ type: integer
required:
- path
type: object
@@ skipped 101 lines (5364 -> 5464) @@
description: Kubelet's generated CSRs will be addressed
to this signer.
type: string
+ user:
+ description: |-
+ user is Optional: The owner UID of the created file.
+ If specified, the item-level user field takes precedence over defaultUser.
+ (Alpha) This field requires the AtomicWriteVolumeUserFields feature gate to be enabled.
+ format: int64
+ type: integer
userAnnotations:
additionalProperties:
type: string
@@ skipped 53 lines (5478 -> 5530) @@
May not contain the path element '..'.
May not start with the string '..'.
type: string
+ user:
+ description: |-
+ user is Optional: The owner UID of the created file.
+ If specified, the item-level user field takes precedence over defaultUser.
+ (Alpha) This field requires the AtomicWriteVolumeUserFields feature gate to be enabled.
+ format: int64
+ type: integer
required:
- key
- path
@@ skipped 41 lines (5544 -> 5584) @@
path is the path relative to the mount point of the file to project the
token into.
type: string
+ user:
+ description: |-
+ user is Optional: The owner UID of the created file.
+ If specified, the item-level user field takes precedence over defaultUser.
+ (Alpha) This field requires the AtomicWriteVolumeUserFields feature gate to be enabled.
+ format: int64
+ type: integer
required:
- path
type: object
@@ skipped 488 lines (5598 -> 6085) @@
* An existing PVC (PersistentVolumeClaim)
If the provisioner or an external controller can support the specified data source,
it will create a new volume based on the contents of the specified data source.
- When the AnyVolumeDataSource feature gate is enabled, dataSource contents will be copied to dataSourceRef,
- and dataSourceRef contents will be copied to dataSource when dataSourceRef.namespace is not specified.
+ dataSource contents will be copied to dataSourceRef, and dataSourceRef contents will be
+ copied to dataSource when dataSourceRef.namespace is not specified.
If the namespace is specified, then dataSourceRef will not be copied to dataSource.
properties:
apiGroup:
@@ skipped 36 lines (6096 -> 6131) @@
specified.
* While dataSource only allows local objects, dataSourceRef allows objects
in any namespaces.
- (Beta) Using this field requires the AnyVolumeDataSource feature gate to be enabled.
(Alpha) Using the namespace field of dataSourceRef requires the CrossNamespaceVolumeDataSource feature gate to be enabled.
properties:
apiGroup:
@@ skipped 201 lines (6139 -> 6339) @@
* An existing PVC (PersistentVolumeClaim)
If the provisioner or an external controller can support the specified data source,
it will create a new volume based on the contents of the specified data source.
- When the AnyVolumeDataSource feature gate is enabled, dataSource contents will be copied to dataSourceRef,
- and dataSourceRef contents will be copied to dataSource when dataSourceRef.namespace is not specified.
+ dataSource contents will be copied to dataSourceRef, and dataSourceRef contents will be
+ copied to dataSource when dataSourceRef.namespace is not specified.
If the namespace is specified, then dataSourceRef will not be copied to dataSource.
properties:
apiGroup:
@@ skipped 38 lines (6350 -> 6387) @@
specified.
* While dataSource only allows local objects, dataSourceRef allows objects
in any namespaces.
- (Beta) Using this field requires the AnyVolumeDataSource feature gate to be enabled.
(Alpha) Using the namespace field of dataSourceRef requires the CrossNamespaceVolumeDataSource feature gate to be enabled.
properties:
apiGroup:
@@ skipped 359 lines (6395 -> 6753) @@
* An existing PVC (PersistentVolumeClaim)
If the provisioner or an external controller can support the specified data source,
it will create a new volume based on the contents of the specified data source.
- When the AnyVolumeDataSource feature gate is enabled, dataSource contents will be copied to dataSourceRef,
- and dataSourceRef contents will be copied to dataSource when dataSourceRef.namespace is not specified.
+ dataSource contents will be copied to dataSourceRef, and dataSourceRef contents will be
+ copied to dataSource when dataSourceRef.namespace is not specified.
If the namespace is specified, then dataSourceRef will not be copied to dataSource.
properties:
apiGroup:
@@ skipped 36 lines (6764 -> 6799) @@
specified.
* While dataSource only allows local objects, dataSourceRef allows objects
in any namespaces.
- (Beta) Using this field requires the AnyVolumeDataSource feature gate to be enabled.
(Alpha) Using the namespace field of dataSourceRef requires the CrossNamespaceVolumeDataSource feature gate to be enabled.
properties:
apiGroup:
@@ skipped 640 lines (6807 -> 7446) @@
description: |-
OperatorCapabilities are the list of capabilities of the
plugin regarding the reconciler
+ items:
+ type: string
+ type: array
+ postgresCapabilities:
+ description: |-
+ PostgresCapabilities are the list of capabilities of the
+ plugin regarding the PostgreSQL configuration
items:
type: string
type: arrayCustomResourceDefinition: databaseroles.postgresql.cnpg.io kind: CustomResourceDefinition
metadata:
annotations:
- controller-gen.kubebuilder.io/version: v0.21.0
+ controller-gen.kubebuilder.io/version: v0.22.0
helm.sh/resource-policy: keep
name: databaseroles.postgresql.cnpg.io
spec:CustomResourceDefinition: databases.postgresql.cnpg.io kind: CustomResourceDefinition
metadata:
annotations:
- controller-gen.kubebuilder.io/version: v0.21.0
+ controller-gen.kubebuilder.io/version: v0.22.0
helm.sh/resource-policy: keep
name: databases.postgresql.cnpg.io
spec:CustomResourceDefinition: failoverquorums.postgresql.cnpg.io kind: CustomResourceDefinition
metadata:
annotations:
- controller-gen.kubebuilder.io/version: v0.21.0
+ controller-gen.kubebuilder.io/version: v0.22.0
helm.sh/resource-policy: keep
name: failoverquorums.postgresql.cnpg.io
spec:CustomResourceDefinition: imagecatalogs.postgresql.cnpg.io kind: CustomResourceDefinition
metadata:
annotations:
- controller-gen.kubebuilder.io/version: v0.21.0
+ controller-gen.kubebuilder.io/version: v0.22.0
helm.sh/resource-policy: keep
name: imagecatalogs.postgresql.cnpg.io
spec:CustomResourceDefinition: poolers.postgresql.cnpg.io kind: CustomResourceDefinition
metadata:
annotations:
- controller-gen.kubebuilder.io/version: v0.21.0
+ controller-gen.kubebuilder.io/version: v0.22.0
helm.sh/resource-policy: keep
name: poolers.postgresql.cnpg.io
spec:
@@ skipped 176 lines (9 -> 184) @@
Only applicable when the action is `HashMod`.
format: int64
+ minimum: 0
type: integer
regex:
description: regex defines the regular expression against
@@ skipped 85 lines (192 -> 276) @@
Only applicable when the action is `HashMod`.
format: int64
+ minimum: 0
type: integer
regex:
description: regex defines the regular expression against
@@ skipped 1620 lines (284 -> 1903) @@
description: Selects a key of a ConfigMap.
properties:
key:
- description: The key to select.
+ description: |-
+ The key to select from the ConfigMap's Data field.
+ Keys in the BinaryData field are not currently propagated to container env vars.
type: string
name:
default: ""
@@ skipped 268 lines (1914 -> 2181) @@
Number must be in the range 1 to 65535.
Name must be an IANA_SVC_NAME.
x-kubernetes-int-or-string: true
+ protocol:
+ description: |-
+ Protocol selects the wire protocol for the probe connection.
+ Nil defaults to HTTP/1.1.
+ type: string
scheme:
description: |-
Scheme to use for connecting to the host.
@@ skipped 108 lines (2193 -> 2300) @@
Number must be in the range 1 to 65535.
Name must be an IANA_SVC_NAME.
x-kubernetes-int-or-string: true
+ protocol:
+ description: |-
+ Protocol selects the wire protocol for the probe connection.
+ Nil defaults to HTTP/1.1.
+ type: string
scheme:
description: |-
Scheme to use for connecting to the host.
@@ skipped 76 lines (2312 -> 2387) @@
grpc:
description: GRPC specifies a GRPC HealthCheckRequest.
properties:
+ mode:
+ description: |-
+ mode specifies the connection mode for the gRPC health probe.
+ Set to "TLS" to use TLS without certificate verification.
+ Set to "Plaintext" to use a plaintext (insecure) connection explicitly.
+ If not specified, the probe uses a plaintext (insecure) connection.
+ type: string
port:
description: Port number of the gRPC service.
Number must be in the range 1 to 65535.
@@ skipped 52 lines (2401 -> 2452) @@
Number must be in the range 1 to 65535.
Name must be an IANA_SVC_NAME.
x-kubernetes-int-or-string: true
+ protocol:
+ description: |-
+ Protocol selects the wire protocol for the probe connection.
+ Nil defaults to HTTP/1.1.
+ type: string
scheme:
description: |-
Scheme to use for connecting to the host.
@@ skipped 151 lines (2464 -> 2614) @@
grpc:
description: GRPC specifies a GRPC HealthCheckRequest.
properties:
+ mode:
+ description: |-
+ mode specifies the connection mode for the gRPC health probe.
+ Set to "TLS" to use TLS without certificate verification.
+ Set to "Plaintext" to use a plaintext (insecure) connection explicitly.
+ If not specified, the probe uses a plaintext (insecure) connection.
+ type: string
port:
description: Port number of the gRPC service.
Number must be in the range 1 to 65535.
@@ skipped 52 lines (2628 -> 2679) @@
Number must be in the range 1 to 65535.
Name must be an IANA_SVC_NAME.
x-kubernetes-int-or-string: true
+ protocol:
+ description: |-
+ Protocol selects the wire protocol for the probe connection.
+ Nil defaults to HTTP/1.1.
+ type: string
scheme:
description: |-
Scheme to use for connecting to the host.
@@ skipped 449 lines (2691 -> 3139) @@
grpc:
description: GRPC specifies a GRPC HealthCheckRequest.
properties:
+ mode:
+ description: |-
+ mode specifies the connection mode for the gRPC health probe.
+ Set to "TLS" to use TLS without certificate verification.
+ Set to "Plaintext" to use a plaintext (insecure) connection explicitly.
+ If not specified, the probe uses a plaintext (insecure) connection.
+ type: string
port:
description: Port number of the gRPC service.
Number must be in the range 1 to 65535.
@@ skipped 52 lines (3153 -> 3204) @@
Number must be in the range 1 to 65535.
Name must be an IANA_SVC_NAME.
x-kubernetes-int-or-string: true
+ protocol:
+ description: |-
+ Protocol selects the wire protocol for the probe connection.
+ Nil defaults to HTTP/1.1.
+ type: string
scheme:
description: |-
Scheme to use for connecting to the host.
@@ skipped 135 lines (3216 -> 3350) @@
description: VolumeMount describes a mounting of a
Volume within a container.
properties:
- mountPath:
+ bindMountOptions:
description: |-
- Path within the container at which the volume should be mounted. Must
- not contain ':'.
+ bindMountOptions is the list of additional bind mount options to apply when
+ mounting this volume into the container. Allowed values are noexec,
+ nodev, and nosuid. These are Linux mount options and have no effect on
+ Windows nodes.
+ This field is not supported with image volumes.
+ This is an alpha field and requires enabling the VolumeBindMountOptions feature gate.
+ items:
+ type: string
+ type: array
+ x-kubernetes-list-type: set
+ mountPath:
+ description: Path within the container at which
+ the volume should be mounted.
type: string
mountPropagation:
description: |-
@@ skipped 205 lines (3375 -> 3579) @@
description: Selects a key of a ConfigMap.
properties:
key:
- description: The key to select.
+ description: |-
+ The key to select from the ConfigMap's Data field.
+ Keys in the BinaryData field are not currently propagated to container env vars.
type: string
name:
default: ""
@@ skipped 265 lines (3590 -> 3854) @@
Number must be in the range 1 to 65535.
Name must be an IANA_SVC_NAME.
x-kubernetes-int-or-string: true
+ protocol:
+ description: |-
+ Protocol selects the wire protocol for the probe connection.
+ Nil defaults to HTTP/1.1.
+ type: string
scheme:
description: |-
Scheme to use for connecting to the host.
@@ skipped 108 lines (3866 -> 3973) @@
Number must be in the range 1 to 65535.
Name must be an IANA_SVC_NAME.
x-kubernetes-int-or-string: true
+ protocol:
+ description: |-
+ Protocol selects the wire protocol for the probe connection.
+ Nil defaults to HTTP/1.1.
+ type: string
scheme:
description: |-
Scheme to use for connecting to the host.
@@ skipped 72 lines (3985 -> 4056) @@
grpc:
description: GRPC specifies a GRPC HealthCheckRequest.
properties:
+ mode:
+ description: |-
+ mode specifies the connection mode for the gRPC health probe.
+ Set to "TLS" to use TLS without certificate verification.
+ Set to "Plaintext" to use a plaintext (insecure) connection explicitly.
+ If not specified, the probe uses a plaintext (insecure) connection.
+ type: string
port:
description: Port number of the gRPC service.
Number must be in the range 1 to 65535.
@@ skipped 52 lines (4070 -> 4121) @@
Number must be in the range 1 to 65535.
Name must be an IANA_SVC_NAME.
x-kubernetes-int-or-string: true
+ protocol:
+ description: |-
+ Protocol selects the wire protocol for the probe connection.
+ Nil defaults to HTTP/1.1.
+ type: string
scheme:
description: |-
Scheme to use for connecting to the host.
@@ skipped 139 lines (4133 -> 4271) @@
grpc:
description: GRPC specifies a GRPC HealthCheckRequest.
properties:
+ mode:
+ description: |-
+ mode specifies the connection mode for the gRPC health probe.
+ Set to "TLS" to use TLS without certificate verification.
+ Set to "Plaintext" to use a plaintext (insecure) connection explicitly.
+ If not specified, the probe uses a plaintext (insecure) connection.
+ type: string
port:
description: Port number of the gRPC service.
Number must be in the range 1 to 65535.
@@ skipped 52 lines (4285 -> 4336) @@
Number must be in the range 1 to 65535.
Name must be an IANA_SVC_NAME.
x-kubernetes-int-or-string: true
+ protocol:
+ description: |-
+ Protocol selects the wire protocol for the probe connection.
+ Nil defaults to HTTP/1.1.
+ type: string
scheme:
description: |-
Scheme to use for connecting to the host.
@@ skipped 418 lines (4348 -> 4765) @@
grpc:
description: GRPC specifies a GRPC HealthCheckRequest.
properties:
+ mode:
+ description: |-
+ mode specifies the connection mode for the gRPC health probe.
+ Set to "TLS" to use TLS without certificate verification.
+ Set to "Plaintext" to use a plaintext (insecure) connection explicitly.
+ If not specified, the probe uses a plaintext (insecure) connection.
+ type: string
port:
description: Port number of the gRPC service.
Number must be in the range 1 to 65535.
@@ skipped 52 lines (4779 -> 4830) @@
Number must be in the range 1 to 65535.
Name must be an IANA_SVC_NAME.
x-kubernetes-int-or-string: true
+ protocol:
+ description: |-
+ Protocol selects the wire protocol for the probe connection.
+ Nil defaults to HTTP/1.1.
+ type: string
scheme:
description: |-
Scheme to use for connecting to the host.
@@ skipped 144 lines (4842 -> 4985) @@
description: VolumeMount describes a mounting of a
Volume within a container.
properties:
+ bindMountOptions:
+ description: |-
+ bindMountOptions is the list of additional bind mount options to apply when
+ mounting this volume into the container. Allowed values are noexec,
+ nodev, and nosuid. These are Linux mount options and have no effect on
+ Windows nodes.
+ This field is not supported with image volumes.
+ This is an alpha field and requires enabling the VolumeBindMountOptions feature gate.
+ items:
+ type: string
+ type: array
+ x-kubernetes-list-type: set
mountPath:
- description: |-
- Path within the container at which the volume should be mounted. Must
- not contain ':'.
+ description: Path within the container at which
+ the volume should be mounted.
type: string
mountPropagation:
description: |-
@@ skipped 65 lines (5010 -> 5074) @@
x-kubernetes-list-map-keys:
- name
x-kubernetes-list-type: map
+ evictionResponders:
+ description: |-
+ evictionResponders reference responders that react to Evictions based on EvictionRequests.
+ Responders should observe and communicate through the Eviction Resource API to help with
+ the graceful termination of a pod. The responders are selected sequentially, according to
+ their specified priority.
+
+ Responders should periodically report on an eviction progress by updating the
+ .status.responders[].heartbeatTime field of the Eviction object. If this field is not updated
+ within the heartbeat deadline defined by the Eviction API (currently 20 minutes), the eviction
+ is passed over to the next responder with a lower priority. If there is no other responder,
+ the last default imperative-eviction.k8s.io/evictor responder with a priority of 100 will
+ evict the pod using the imperative Eviction API (pods/<name>/eviction subresource).
+
+ The maximum length of the responders list is 10.
+ Responders are not supported when the pod is part of a PodGroup (.spec.schedulingGroup is set).
+ This field can only be set on creation and is immutable afterwards.
+ items:
+ description: |-
+ EvictionResponder allows you to specify the responder reacting to an Eviction.
+ Responders should observe and communicate through the Eviction Resource API to help with
+ the graceful eviction of a target (e.g. termination of a pod).
+ properties:
+ name:
+ description: |-
+ name allows you to identify the responder responding to the Eviction.
+
+ It must be a valid domain-prefixed key (such as "acme.io/foo").
+ Domain names *.k8s.io and *.kubernetes.io are reserved.
+ This field must be unique for each responder.
+ This field is required.
+ type: string
+ priority:
+ description: |-
+ priority for this responder. Higher priorities are selected first by the evictionrequest-controller.
+ If there are responders with the same priority, the responder whose domain name comes first in the
+ alphabetical higher domain order, will be picked. This means that the top domain labels are compared
+ alphabetically first, followed by the lower domain labels. The key is compared last.
+
+ The responder that is the managing controller of the pod should set the value of
+ this field to 10000 to allow both for preemption or fallback registration by other
+ responders.
+
+ The minimum value is 0 and the maximum value is 100000.
+ The interval 0-999 is reserved for responders with *.k8s.io suffix.
+ This field is required.
+ format: int32
+ type: integer
+ required:
+ - name
+ - priority
+ type: object
+ x-kubernetes-map-type: atomic
+ type: array
+ x-kubernetes-list-map-keys:
+ - name
+ x-kubernetes-list-type: map
hostAliases:
description: |-
HostAliases is an optional list of hosts and IPs that will be injected into the pod's hosts
@@ skipped 64 lines (5138 -> 5201) @@
- `hostNetwork` must be set to false.
This field must be a valid DNS subdomain as defined in RFC 1123 and contain at most 64 characters.
- Requires the HostnameOverride feature gate to be enabled.
type: string
imagePullSecrets:
description: |-
@@ skipped 100 lines (5209 -> 5308) @@
description: Selects a key of a ConfigMap.
properties:
key:
- description: The key to select.
+ description: |-
+ The key to select from the ConfigMap's Data field.
+ Keys in the BinaryData field are not currently propagated to container env vars.
type: string
name:
default: ""
@@ skipped 268 lines (5319 -> 5586) @@
Number must be in the range 1 to 65535.
Name must be an IANA_SVC_NAME.
x-kubernetes-int-or-string: true
+ protocol:
+ description: |-
+ Protocol selects the wire protocol for the probe connection.
+ Nil defaults to HTTP/1.1.
+ type: string
scheme:
description: |-
Scheme to use for connecting to the host.
@@ skipped 108 lines (5598 -> 5705) @@
Number must be in the range 1 to 65535.
Name must be an IANA_SVC_NAME.
x-kubernetes-int-or-string: true
+ protocol:
+ description: |-
+ Protocol selects the wire protocol for the probe connection.
+ Nil defaults to HTTP/1.1.
+ type: string
scheme:
description: |-
Scheme to use for connecting to the host.
@@ skipped 76 lines (5717 -> 5792) @@
grpc:
description: GRPC specifies a GRPC HealthCheckRequest.
properties:
+ mode:
+ description: |-
+ mode specifies the connection mode for the gRPC health probe.
+ Set to "TLS" to use TLS without certificate verification.
+ Set to "Plaintext" to use a plaintext (insecure) connection explicitly.
+ If not specified, the probe uses a plaintext (insecure) connection.
+ type: string
port:
description: Port number of the gRPC service.
Number must be in the range 1 to 65535.
@@ skipped 52 lines (5806 -> 5857) @@
Number must be in the range 1 to 65535.
Name must be an IANA_SVC_NAME.
x-kubernetes-int-or-string: true
+ protocol:
+ description: |-
+ Protocol selects the wire protocol for the probe connection.
+ Nil defaults to HTTP/1.1.
+ type: string
scheme:
description: |-
Scheme to use for connecting to the host.
@@ skipped 151 lines (5869 -> 6019) @@
grpc:
description: GRPC specifies a GRPC HealthCheckRequest.
properties:
+ mode:
+ description: |-
+ mode specifies the connection mode for the gRPC health probe.
+ Set to "TLS" to use TLS without certificate verification.
+ Set to "Plaintext" to use a plaintext (insecure) connection explicitly.
+ If not specified, the probe uses a plaintext (insecure) connection.
+ type: string
port:
description: Port number of the gRPC service.
Number must be in the range 1 to 65535.
@@ skipped 52 lines (6033 -> 6084) @@
Number must be in the range 1 to 65535.
Name must be an IANA_SVC_NAME.
x-kubernetes-int-or-string: true
+ protocol:
+ description: |-
+ Protocol selects the wire protocol for the probe connection.
+ Nil defaults to HTTP/1.1.
+ type: string
scheme:
description: |-
Scheme to use for connecting to the host.
@@ skipped 449 lines (6096 -> 6544) @@
grpc:
description: GRPC specifies a GRPC HealthCheckRequest.
properties:
+ mode:
+ description: |-
+ mode specifies the connection mode for the gRPC health probe.
+ Set to "TLS" to use TLS without certificate verification.
+ Set to "Plaintext" to use a plaintext (insecure) connection explicitly.
+ If not specified, the probe uses a plaintext (insecure) connection.
+ type: string
port:
description: Port number of the gRPC service.
Number must be in the range 1 to 65535.
@@ skipped 52 lines (6558 -> 6609) @@
Number must be in the range 1 to 65535.
Name must be an IANA_SVC_NAME.
x-kubernetes-int-or-string: true
+ protocol:
+ description: |-
+ Protocol selects the wire protocol for the probe connection.
+ Nil defaults to HTTP/1.1.
+ type: string
scheme:
description: |-
Scheme to use for connecting to the host.
@@ skipped 135 lines (6621 -> 6755) @@
description: VolumeMount describes a mounting of a
Volume within a container.
properties:
+ bindMountOptions:
+ description: |-
+ bindMountOptions is the list of additional bind mount options to apply when
+ mounting this volume into the container. Allowed values are noexec,
+ nodev, and nosuid. These are Linux mount options and have no effect on
+ Windows nodes.
+ This field is not supported with image volumes.
+ This is an alpha field and requires enabling the VolumeBindMountOptions feature gate.
+ items:
+ type: string
+ type: array
+ x-kubernetes-list-type: set
mountPath:
- description: |-
- Path within the container at which the volume should be mounted. Must
- not contain ':'.
+ description: Path within the container at which
+ the volume should be mounted.
type: string
mountPropagation:
description: |-
@@ skipped 147 lines (6780 -> 6926) @@
description: |-
PreemptionPolicy is the Policy for preempting pods with lower priority.
One of Never, PreemptLowerPriority.
+ When Priority Admission Controller is enabled, it prevents users from setting
+ this field. The admission controller populates this field from PriorityClassName.
Defaults to PreemptLowerPriority if unset.
type: string
priority:
@@ skipped 338 lines (6935 -> 7272) @@
Eligible volumes are in-tree FibreChannel and iSCSI volumes, and all CSI volumes
whose CSI driver announces SELinux support by setting spec.seLinuxMount: true in their
CSIDriver instance. Other volumes are always re-labelled recursively.
- "MountOption" value is allowed only when SELinuxMount feature gate is enabled.
- If not specified and SELinuxMount feature gate is enabled, "MountOption" is used.
- If not specified and SELinuxMount feature gate is disabled, "MountOption" is used for ReadWriteOncePod volumes
- and "Recursive" for all other volumes.
+ If not specified, "MountOption" is used.
This field affects only Pods that have SELinux label set, either in PodSecurityContext or in SecurityContext of all containers.
@@ skipped 613 lines (7285 -> 7897) @@
mode, like fsGroup, and the result can be other mode bits set.
format: int32
type: integer
+ defaultUser:
+ description: |-
+ defaultUser is Optional: The owner UID of the created files by default.
+ The defaultUser field is only used as a fallback when the item-level user field is unset.
+ (Alpha) This field requires the AtomicWriteVolumeUserFields feature gate to be enabled.
+ format: int64
+ type: integer
items:
description: |-
items if unspecified, each key-value pair in the Data field of the referenced
@@ skipped 27 lines (7911 -> 7937) @@
May not contain the path element '..'.
May not start with the string '..'.
type: string
+ user:
+ description: |-
+ user is Optional: The owner UID of the created file.
+ If specified, the item-level user field takes precedence over defaultUser.
+ (Alpha) This field requires the AtomicWriteVolumeUserFields feature gate to be enabled.
+ format: int64
+ type: integer
required:
- key
- path
@@ skipped 81 lines (7951 -> 8031) @@
mode, like fsGroup, and the result can be other mode bits set.
format: int32
type: integer
+ defaultUser:
+ description: |-
+ defaultUser is Optional: The owner UID of the created files by default.
+ The defaultUser field is only used as a fallback when the item-level user field is unset.
+ (Alpha) This field requires the AtomicWriteVolumeUserFields feature gate to be enabled.
+ format: int64
+ type: integer
items:
description: Items is a list of downward API volume
file
@@ skipped 62 lines (8045 -> 8106) @@
- resource
type: object
x-kubernetes-map-type: atomic
+ user:
+ description: |-
+ user is Optional: The owner UID of the created file.
+ If specified, the item-level user field takes precedence over defaultUser.
+ (Alpha) This field requires the AtomicWriteVolumeUserFields feature gate to be enabled.
+ format: int64
+ type: integer
required:
- path
type: object
@@ skipped 12 lines (8120 -> 8131) @@
Must be an empty string (default) or Memory.
More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir
type: string
+ mode:
+ description: |-
+ mode specifies the permission bits for the emptyDir directory, in numeric
+ notation (e.g., 0755, 01777). Must be a value between 0000 and 01777.
+ If not specified, defaults to 0777.
+ This might be in conflict with other options that affect the file
+ mode, like fsGroup. If fsGroup is specified, the fsGroup permissions
+ will override the mode specified here.
+ This field has no effect on Windows.
+ This field is alpha and requires EmptyDirVolumeMode featuregate to be enabled.
+ format: int32
+ type: integer
sizeLimit:
anyOf:
- type: integer
@@ skipped 87 lines (8150 -> 8236) @@
* An existing PVC (PersistentVolumeClaim)
If the provisioner o🚨 Diff is too long
Stats: |
renovate
Bot
force-pushed
the
renovate/cloudnative-pg-0.x
branch
from
September 25, 2026 02:12
3087e93 to
27e8ad8
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
0.29.0→0.29.1Release Notes
cloudnative-pg/charts (cloudnative-pg)
v0.29.1Compare Source
CloudNativePG Operator Helm Chart
What's Changed
New Contributors
Full Changelog: cloudnative-pg/charts@plugin-barman-cloud-v0.8.0...cloudnative-pg-v0.29.1
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.