Skip to content

v0.8.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 24 Oct 00:31
· 10 commits to main since this release
v0.8.0
0752b99
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Warning

From v0.8.1, the Helm OCI chart coordinate changes from
oci://ghcr.io/aboutbits/charts/postgresql-operator
to
oci://ghcr.io/aboutbits/helm-charts/postgresql-operator (#88).
Version 0.8.0 stays available at the old coordinate. For v0.8.1 and later, use the new coordinate.

Installation

Helm Chart

helm install postgresql-operator oci://ghcr.io/aboutbits/charts/postgresql-operator --version 0.8.0

Alternatively, install the Helm chart from the release asset:

helm install postgresql-operator https://github.com/aboutbits/postgresql-operator/releases/download/v0.8.0/postgresql-operator-0.8.0.tgz

With the Helm chart, the Custom Resource Definitions (CRDs) are installed automatically.
However, if you deploy the operator directly from the OCI image, the CRDs are not automatically applied and must be installed separately.

Manual CRD Installation

kubectl apply -f https://github.com/aboutbits/postgresql-operator/releases/download/v0.8.0/clusterconnections.postgresql.aboutbits.it-v1.yml
kubectl apply -f https://github.com/aboutbits/postgresql-operator/releases/download/v0.8.0/databases.postgresql.aboutbits.it-v1.yml
kubectl apply -f https://github.com/aboutbits/postgresql-operator/releases/download/v0.8.0/schemas.postgresql.aboutbits.it-v1.yml
kubectl apply -f https://github.com/aboutbits/postgresql-operator/releases/download/v0.8.0/roles.postgresql.aboutbits.it-v1.yml
kubectl apply -f https://github.com/aboutbits/postgresql-operator/releases/download/v0.8.0/grants.postgresql.aboutbits.it-v1.yml
kubectl apply -f https://github.com/aboutbits/postgresql-operator/releases/download/v0.8.0/defaultprivileges.postgresql.aboutbits.it-v1.yml

Highlights

  • The Helm chart is now an OCI artifact on GHCR (#79): helm install postgresql-operator oci://ghcr.io/aboutbits/charts/postgresql-operator --version 0.8.0. The .tgz release asset stays available.
  • Security fix for PostgreSQL connections with channelBinding=require: PostgreSQL JDBC 42.7.13 and scram-client 3.3, which come with Quarkus 3.40.1.1 (#85), fix CVE-2026-54291 and CVE-2026-53712. An attacker who could intercept the TLS connection to PostgreSQL could silently remove the channel binding, which channelBinding=require in the ClusterConnection parameters must guarantee. Connections without channelBinding=require were not affected.
  • More stable start: Fabric8 7.8.0 retries a closed connection on the first informer LIST, which could stop the operator at start with Couldn't start informer … HttpClosedException (quarkiverse/quarkus-operator-sdk#1285).

Upgrade notes

  • RBAC in the Helm chart: the chart no longer contains the six <reconciler>-cluster-role-binding ClusterRoleBindings. helm upgrade deletes them. Each reconciler still gets its permissions from <reconciler>-role-binding: a ClusterRoleBinding when it watches all namespaces, or RoleBindings for the watched namespaces. The ClusterRoles do not change. The removed bindings gave cluster-wide permissions also when the operator watched only some namespaces.
  • Container base image: the image now uses Red Hat UBI 10 (RHEL 10.2) with OpenJDK 25 instead of UBI 9 (#86).
  • JSON logs (only with QUARKUS_LOG_CONSOLE_JSON_ENABLED=true): in the ECS format, error.stack_trace is now one string, and the MDC data is written again. Check log pipelines that parse these fields.
  • Metrics: /q/metrics can show more Java Operator SDK metrics, because the Operator SDK now uses the Micrometer registry directly.

What's Changed

  • Replace Checkstyle with Error Prone by @ThoSap in #66
  • Enable the javac -Xlint categories that Error Prone cannot see by @ThoSap in #67
  • Replace HTML JavaDoc with Markdown and enable javac -Xdoclint by @ThoSap in #69
  • Enhance the NullAway configuration by @ThoSap in #68
  • Improve code quality by enforcing more Error Prone checks by @ThoSap in #77
  • Publish the Helm chart as an OCI artifact to GHCR by @ThoSap in #79
  • Restrict the workflow token permissions and pass only the needed secrets by @ThoSap in #80
  • Update jOOQ to 3.21.9 by @ThoSap in #81
  • Update Datafaker to 2.7.0 by @ThoSap in #82
  • Update NullAway to 0.14.3 and JSpecify to 1.0.1 by @ThoSap in #83
  • Update the Gradle Wrapper to 9.8.2 by @ThoSap in #84
  • Update Quarkus to 3.40.1.1 (LTS) by @ThoSap in #85
  • Update the container base image to UBI 10 by @ThoSap in #86
  • Update the Axion Release Plugin to 1.21.4 by @ThoSap in #87

Full Changelog: v0.7.0...v0.8.0

Contributors

ThoSap
Assets 9
Loading