Skip to content

Bump postgres default to 18.6-alpine3.23 - #2637

Merged
EItanya merged 3 commits into
kagent-dev:mainfrom
inFocus7:bump-pg-to-18-6-alpine
Sep 1, 2026
Merged

Bump postgres default to 18.6-alpine3.23#2637
EItanya merged 3 commits into
kagent-dev:mainfrom
inFocus7:bump-pg-to-18-6-alpine

Conversation

@inFocus7

Copy link
Copy Markdown
Contributor

Bumps the base/default postgres version to 18.6-alpine3.23, resolving CVEs.

This is a safe bump based on the pg upgrade notes, as we don't use GIN indexes in tables. Pinned alpine to 3.23, as it was the version used for the previous 18.4 image -- if we did not add the alpine pin, it would have bumped to 3.24.

Signed-off-by: Fabian Gonzalez <fabian.gonzalez@solo.io>
@inFocus7
inFocus7 requested a review from a team as a code owner August 31, 2026 14:44
@EItanya
EItanya merged commit bf49169 into kagent-dev:main Sep 1, 2026
23 of 24 checks passed
EItanya pushed a commit that referenced this pull request Sep 1, 2026
#2650)

Backport of #2637 to `release/v0.10.x`.

Bumps the bundled/default PostgreSQL image from `18.3-alpine` to
`18.6-alpine3.23`, resolving CVEs.

This is a safe bump based on the [pg 18.6 release
notes](https://www.postgresql.org/docs/release/18.6/) — we don't use GIN
indexes in any table. `alpine` is pinned to `3.23` (the variant the
previous `18.3` image used); without the pin the tag would float to
`3.24`.

Also carries the upgrade-test fix from the original PR: an image-tag
bump recreates the Postgres pod, and the old `Terminating` pod can still
match the selector for its whole grace period, so `podNameForSelectorE`
now sorts by creation timestamp and takes the newest pod.

Cherry-picked cleanly from bf49169 — no
conflicts, no manual edits.

**Verification**
- `helm unittest helm/kagent -f 'tests/postgresql_test.yaml'` — 32/32
pass
- `go vet ./core/test/upgrade/` — clean

Signed-off-by: Fabian Gonzalez <fabian.gonzalez@solo.io>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants