Bump postgres default to 18.6-alpine3.23 - #2637
Merged
Merged
Conversation
Signed-off-by: Fabian Gonzalez <fabian.gonzalez@solo.io>
EItanya
pushed a commit
that referenced
this pull request
Sep 1, 2026
#2650) Backport of #2637 to `release/v0.10.x`. Bumps the bundled/default PostgreSQL image from `18.3-alpine` to `18.6-alpine3.23`, resolving CVEs. This is a safe bump based on the [pg 18.6 release notes](https://www.postgresql.org/docs/release/18.6/) — we don't use GIN indexes in any table. `alpine` is pinned to `3.23` (the variant the previous `18.3` image used); without the pin the tag would float to `3.24`. Also carries the upgrade-test fix from the original PR: an image-tag bump recreates the Postgres pod, and the old `Terminating` pod can still match the selector for its whole grace period, so `podNameForSelectorE` now sorts by creation timestamp and takes the newest pod. Cherry-picked cleanly from bf49169 — no conflicts, no manual edits. **Verification** - `helm unittest helm/kagent -f 'tests/postgresql_test.yaml'` — 32/32 pass - `go vet ./core/test/upgrade/` — clean Signed-off-by: Fabian Gonzalez <fabian.gonzalez@solo.io>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the base/default postgres version to
18.6-alpine3.23, resolving CVEs.This is a safe bump based on the pg upgrade notes, as we don't use GIN indexes in tables. Pinned
alpineto3.23, as it was the version used for the previous18.4image -- if we did not add the alpine pin, it would have bumped to3.24.