Pull latest crunchy updates (#9)

* Updates for August Release * Bump monitoring versions * feat: Add customised env var and feature flags This change adds 3 new features: - The ability to enable feature flags with the .Values.features key - The ability to add extra environment variables to the container env - The ability to completely override env variables (not recommended) ClosesCrunchyData#262 * Update pgAdmin example - add user management to pgAdmin example - Deploy with `internal` only auth by default * Define use in postgres example * Remove Images from examples - Images are defined in the operator deployment as RELATED_IMAGES. We don't need to define them in two places. - Leave a commented image field in the postgres example * Changes to operator installers for 5.7 release. * Remove old singlenamespace installer artifacts. * Fix broken hyperlinks. * patching Kustomize monitoring installer * 5.7.1 release updates (CrunchyData#289) 5.7.1 release updates * 5.7.2 release * Update copyright to 2025 (CrunchyData#292) * v5.7.3 release * Release 5.7.4 PGO-2238 * update p * Adds missing gis image from last release * Updates to v5.8.0 * Update Postgres Helm Chart to include instrumentation (CrunchyData#299) * Update postgres.yaml * Update values.yaml * Update postgres.yaml * Apply suggestions from code review Co-authored-by: Drew Sessler <[email protected]> --------- Co-authored-by: Drew Sessler <[email protected]> * Updates monitoring example for v5.8 * Update for 2025-04 minor release (CrunchyData#302) * Added Helm support for Affinity and Tolerations (CrunchyData#304) * Added support for tolerations / affinity to Helm chart with consistent flow control * update for release * fix whitespace * Update Examples for the Latest Version of Keycloak The Keycloak example now works with the latest version of Keycloak. This includes using the new env vars and settings that are now available in the latest version of Keycloak. The PostgresCluster's created for the Keycloak examples (which includes any PostgresCluster's created for use with Keycloak in the Crunchy Postgres for Kubernetes documentation) have also been updated to set the "autoCreateUserSchema" annotation to "true". Without this setting, Keycloak will crash on startup when attempting to use the public schema. --------- Co-authored-by: jmckulk <[email protected]> Co-authored-by: Joseph Mckulka <[email protected]> Co-authored-by: Anthony Landreth <[email protected]> Co-authored-by: Daniel Holmes <[email protected]> Co-authored-by: Drew Sessler <[email protected]> Co-authored-by: crunchy-containers-bot <[email protected]> Co-authored-by: Tony Landreth <[email protected]> Co-authored-by: ValClarkson <[email protected]> Co-authored-by: Benjamin Blattberg <[email protected]> Co-authored-by: Drew Sessler <[email protected]> Co-authored-by: Dan T <[email protected]> Co-authored-by: andrewlecuyer <[email protected]>

Author: 11 people

LICENSE.md

@@ -175,7 +175,7 @@
 
  END OF TERMS AND CONDITIONS
 
- Copyright 2017 - 2024 Crunchy Data Solutions, Inc.
+ Copyright 2017 - 2025 Crunchy Data Solutions, Inc.
 
  Licensed under the Apache License, Version 2.0 (the "License");
  you may not use this file except in compliance with the License.

helm/install/Chart.yaml

@@ -4,5 +4,5 @@ description: Installer for PGO, the open source Postgres Operator from Crunchy D
 
 type: application
 # The version below should match the version on the PostgresCluster CRD
-version: 5.6.0
-appVersion: 5.6.0
+version: 5.8.2
+appVersion: 5.8.2

helm/install/LICENSE.txt

@@ -0,0 +1,43 @@
+ Crunchy Data
+
+ Crunchy PostgreSQL for Kubernetes Terms of Use
+
+Crunchy Data Solutions, Inc. (Crunchy Data) has integrated the Crunchy Data
+distribution of PostgreSQL and the PostgreSQL Operator as the commercial product,
+Crunchy PostgreSQL for Kubernetes. This Crunchy PostgreSQL for Kubernetes Terms
+of Use establishes a framework that will enable Crunchy Data to provide Crunchy
+Data packaged open source software, made available as a series of containers (the
+"Crunchy Data Software"), to users, subject to applicable terms and conditions.
+
+By using or accessing the Crunchy Data Software, the using or accessing party
+agrees to applicable terms and conditions and agrees that the applicable terms as
+set forth in this Crunchy PostgreSQL for Kubernetes Terms of Use will govern the
+use of the Crunchy Data Software unless otherwise agreed to in writing by Crunchy
+Data and the using or accessing party. If at any time the applicable terms are
+no longer acceptable to the using or accessing party, the using or accessing
+party should immediately cease all use of the Crunchy Data Software.
+
+For users with a valid Crunchy Data subscription agreement, unless otherwise
+agreed to in writing, the use of Crunchy PostgreSQL for Kubernetes, including the
+use of each of the containers included therein, by users with a valid Crunchy
+Data subscription agreement, for both development and production purposes, is
+subject to the Crunchy Data Terms of Use (the "Crunchy Data Terms of Use")
+located at:
+
+ * https://access.crunchydata.com/EULA
+
+Crunchy PostgreSQL for Kubernetes constitutes Crunchy Data Software under the
+Crunchy Data Terms of Use and its use is not intended to prohibit the rights
+under any open source license.
+
+For users without a valid Crunchy Data subscription agreement, the Crunchy Data
+Software is provided for use under the Crunchy Data Developer Program. Unless
+otherwise agreed to in writing, the use of Crunchy PostgreSQL for Kubernetes,
+including the use of each of the containers included therein, is subject to the
+Crunchy Data Developer Program Terms of Use (the "Developer Terms of Use"):
+
+ * https://www.crunchydata.com/developers/terms-of-use
+
+Crunchy PostgreSQL for Kubernetes constitutes Crunchy Developer Software under
+the Crunchy Data Developer Program Terms of Use and its use is not intended to
+prohibit the rights under any open source license.

helm/install/crds/postgres-operator.crunchydata.com_crunchybridgeclusters.yaml

@@ -98,3 +98,36 @@ imagePullSecrets:
  value: {{$object.image | quote }}
 {{- end }}
 {{- end }}
+
+
+{{- define "install.defaultEnv" -}}
+- name: CRUNCHY_DEBUG
+ value: {{.Values.debug | nefalse | quote }}
+- name: PGO_NAMESPACE
+ valueFrom: { fieldRef:{apiVersion: v1, fieldPath: metadata.namespace } }
+{{- if .Values.singleNamespace }}
+- name: PGO_TARGET_NAMESPACE
+ valueFrom: { fieldRef:{apiVersion: v1, fieldPath: metadata.namespace } }
+{{- end }}
+{{- if .Values.workers }}
+- name: PGO_WORKERS
+ value: {{.Values.workers | quote }}
+{{- end }}
+{{- include"install.relatedImages" . }}
+{{- if .Values.disable_check_for_upgrades }}
+- name: CHECK_FOR_UPGRADES
+ value: "false"
+{{- end }}
+{{- if .Values.features }}
+{{- $value := .Values.features }}
+- name: PGO_FEATURE_GATES
+{{- $out := "" -}}
+{{- ifeq (kindOf $value) "map" -}}
+{{- range $key, $val := $value -}}
+{{- $out = (print $out$key"="$val",") -}}
+{{- end }}
+{{- end }}
+ value: "{{trimSuffix ","$out}}"
+{{- end }}
+{{- end }}{{/* define */}}
+

helm/install/crds/postgres-operator.crunchydata.com_pgadmins.yaml

@@ -7,7 +7,7 @@ metadata:
 {{- include "install.labels" . | nindent 4 }}
 {{- include "install.clusterLabels" . | nindent 4 }}
 spec:
-replicas: 1
+replicas: {{.Values.replicas }}
 strategy: {type: Recreate }
 selector:
 matchLabels:
@@ -24,22 +24,19 @@ spec:
  - name: operator
 image: {{required ".Values.controllerImages.cluster is required" .Values.controllerImages.cluster | quote }}
 env:
- - name: CRUNCHY_DEBUG
-value: {{.Values.debug | ne false | quote }}
- - name: PGO_NAMESPACE
-valueFrom: {fieldRef:{apiVersion: v1, fieldPath: metadata.namespace } }
-{{- if .Values.singleNamespace }}
- - name: PGO_TARGET_NAMESPACE
-valueFrom: {fieldRef:{apiVersion: v1, fieldPath: metadata.namespace } }
+ - name: PGO_INSTALLER
+value: helm
+ - name: PGO_INSTALLER_ORIGIN
+value: examples-repo
+ - name: PGO_CONTROLLER_LEASE_NAME
+value: {{.Values.pgoControllerLeaseName }}
+{{- if .Values.envOverride }}
+{{- toYaml .Values.envOverride | nindent 10 }}
+{{- else -}}
+{{- include "install.defaultEnv" . | nindent 10 }}
 {{- end }}
-{{- if .Values.workers }}
- - name: PGO_WORKERS
-value: {{.Values.workers | quote }}
-{{- end }}
-{{- include "install.relatedImages" . | indent 8 }}
-{{- if .Values.disable_check_for_upgrades }}
- - name: CHECK_FOR_UPGRADES
-value: "false"
+{{- if .Values.extraEnv }}
+{{- toYaml .Values.extraEnv | nindent 10 }}
 {{- end }}
 {{- if .Values.resources.controller }}
 resources:
@@ -52,3 +49,26 @@ spec:
 capabilities: {drop: [ALL] }
 readOnlyRootFilesystem: true
 runAsNonRoot: true
+ports:
+ - containerPort: 8443
+name: metrics
+livenessProbe:
+httpGet:
+path: /readyz
+port: 8081
+initialDelaySeconds: 15
+periodSeconds: 20
+readinessProbe:
+httpGet:
+path: /healthz
+port: 8081
+initialDelaySeconds: 5
+periodSeconds: 10
+{{- if .Values.tolerations }}
+tolerations:
+{{- toYaml .Values.tolerations | nindent 8 }}
+{{- end }}
+{{- if .Values.affinity }}
+affinity:
+{{- toYaml .Values.affinity | nindent 8 }}
+{{- end }}

helm/install/crds/postgres-operator.crunchydata.com_pgupgrades.yaml

@@ -13,6 +13,7 @@ rules:
  - configmaps
  - persistentvolumeclaims
  - secrets
+ - serviceaccounts
  - services
 verbs:
  - create
@@ -57,16 +58,6 @@ rules:
  - list
  - patch
  - watch
-- apiGroups:
- - ''
-resources:
- - serviceaccounts
-verbs:
- - create
- - get
- - list
- - patch
- - watch
 - apiGroups:
  - apps
 resources:
@@ -79,6 +70,18 @@ rules:
  - list
  - patch
  - watch
+- apiGroups:
+ - authentication.k8s.io
+resources:
+ - tokenreviews
+verbs:
+ - create
+- apiGroups:
+ - authorization.k8s.io
+resources:
+ - subjectaccessreviews
+verbs:
+ - create
 - apiGroups:
  - batch
 resources:
@@ -91,6 +94,15 @@ rules:
  - list
  - patch
  - watch
+- apiGroups:
+ - coordination.k8s.io
+resources:
+ - leases
+verbs:
+ - create
+ - get
+ - update
+ - watch
 - apiGroups:
  - policy
 resources:
@@ -161,6 +173,18 @@ rules:
  - roles
 verbs:
  - create
+ - delete
+ - get
+ - list
+ - patch
+ - watch
+- apiGroups:
+ - snapshot.storage.k8s.io
+resources:
+ - volumesnapshots
+verbs:
+ - create
+ - delete
  - get
  - list
  - patch