Bump v4.6.2

Author: Jonathan S. Katz

Makefile

@@ -5,7 +5,7 @@ PGOROOT ?= $(CURDIR)
 PGO_BASEOS ?= centos8
 PGO_IMAGE_PREFIX ?= crunchydata
 PGO_IMAGE_TAG ?= $(PGO_BASEOS)-$(PGO_VERSION)
-PGO_VERSION ?= 4.6.1
+PGO_VERSION ?= 4.6.2
 PGO_PG_VERSION ?= 13
 PGO_PG_FULLVERSION ?= 13.2
 PGO_BACKREST_VERSION ?= 2.31

README.md

@@ -167,7 +167,7 @@ Based on your storage settings in your Kubernetes environment, you may be able t
 
 ```shell
 kubectl create namespace pgo
-kubectl apply -f https://raw.githubusercontent.com/CrunchyData/postgres-operator/v4.6.1/installers/kubectl/postgres-operator.yml
+kubectl apply -f https://raw.githubusercontent.com/CrunchyData/postgres-operator/v4.6.2/installers/kubectl/postgres-operator.yml
 ```
 
 Otherwise, we highly recommend following the instructions from our [Quickstart](https://access.crunchydata.com/documentation/postgres-operator/latest/quickstart/).

bin/push-ccp-to-gcr.sh

@@ -16,7 +16,7 @@
 GCR_IMAGE_PREFIX=gcr.io/crunchy-dev-test
 
 CCP_IMAGE_PREFIX=crunchydata
-CCP_IMAGE_TAG=centos8-13.2-4.6.1
+CCP_IMAGE_TAG=centos8-13.2-4.6.2
 
 IMAGES=(
 crunchy-prometheus

conf/postgres-operator/pgo.yaml

@@ -2,7 +2,7 @@ Cluster:
   CCPImagePrefix:  registry.developers.crunchydata.com/crunchydata
   Metrics:  false
   Badger:  false
-  CCPImageTag:  centos8-13.2-4.6.1
+  CCPImageTag:  centos8-13.2-4.6.2
   Port:  5432
   PGBadgerPort: 10000
   ExporterPort: 9187
@@ -80,4 +80,4 @@ Storage:
 Pgo:
   Audit:  false
   PGOImagePrefix:  registry.developers.crunchydata.com/crunchydata
-  PGOImageTag:  centos8-4.6.1
+  PGOImageTag:  centos8-4.6.2

docs/config.toml

@@ -25,7 +25,7 @@ disableNavChevron = false # set true to hide next/prev chevron, default is false
 highlightClientSide = false # set true to use highlight.pack.js instead of the default hugo chroma highlighter
 menushortcutsnewtab = true # set true to open shortcuts links to a new tab/window
 enableGitInfo = true
-operatorVersion = "4.6.1"
+operatorVersion = "4.6.2"
 postgresVersion = "13.2"
 postgresVersion13 = "13.2"
 postgresVersion12 = "12.6"

docs/content/Configuration/compatibility.md

@@ -12,6 +12,12 @@ version dependencies between the two projects. Below are the operator releases a
 
 | Operator Release   |      Container Release      | Postgres | PgBackrest Version
 |:----------|:-------------|:------------|:--------------
+| 4.6.2 | 4.6.2  | 13.2 | 2.31 |
+|||12.6|2.31|
+|||11.11|2.31|
+|||10.16|2.31|
+|||9.6.21|2.31|
+||||
 | 4.6.1 | 4.6.1  | 13.2 | 2.31 |
 |||12.6|2.31|
 |||11.11|2.31|

docs/content/releases/4.6.2.md

@@ -0,0 +1,30 @@
+---
+title: "4.6.2"
+date:
+draft: false
+weight: 58
+---
+
+Crunchy Data announces the release of the PostgreSQL Operator 4.6.2 on March 17, 2021.
+
+The PostgreSQL Operator is released in conjunction with the [Crunchy Container Suite](https://github.com/CrunchyData/crunchy-containers/).
+
+PostgreSQL Operator 4.6.2 release includes the following software versions upgrades:
+
+- [Patroni](https://patroni.readthedocs.io/) is now at version 2.0.2.
+
+PostgreSQL Operator is tested against Kubernetes 1.17 - 1.20, OpenShift 3.11, OpenShift 4.4+, Google Kubernetes Engine (GKE), Amazon EKS, Microsoft AKS, and VMware Enterprise PKS 1.3+, and works on other Kubernetes distributions as well.
+
+## Changes
+
+- The Postgres Operator and associated containers now contain defaults to use more locked down Pod and Container security context settings. These include setting `readOnlyRootFileSystem` to `true`, `allowPrivilegeEscalation` to `false`,  and explicitly stating that the container should not run as `root`. Many of these were already honored, if not defaulted, within the Postgres Operator ecosystem, but these changes make the settings explicit. This is all configuration: there are no breaking changes, and these configurations can be supported down to at least the 4.2 series.
+- Revert setting "UsePAM" to "yes" by default as the bug fix in Docker that required that change was applied roughly one year ago.
+- On Operator boot, Automatically detect when deployed in an OpenShift environment and set `DisableFSGroup` to `true`. This makes it easier to get started with the Postgres Operator in an OpenShift environment with the default security settings (i.e. `restricted`). If you use the `anyuid` Security Context Constraint, you will need to explicitly set `DisableFSGroup` to `false`.
+
+## Fixes
+
+- Ensure `archive_mode` is forced to `on` when performing using the "restore in place" method. This ensures that the timeline is correctly incremented post-restore, which could manifest itself with various types of WAL archive failures.
+- Fix error when attempting to perform restores when using node affinity. Reported by (@gilfrade) and Cristian Chiru (@cristichiru).
+- Fix issue where certain pgAdmin 4 functions did not work (e.g. taking a backup) due to `python` references in EL8 containers. Reported by (@douggutaby).
+- Ensure a Postgres cluster shutdown can execute even if the `status` subresource of a `pgclusters.crunchydata.com` custom resource is missing.
+- Ensure major upgrades via `crunchy-upgrade` support PostgreSQL 12 and PostgreSQL 13. Reported by (@lbartnicki92).

examples/create-by-resource/fromcrd.json

@@ -10,7 +10,7 @@
       "deployment-name": "fromcrd",
       "name": "fromcrd",
       "pg-cluster": "fromcrd",
-      "pgo-version": "4.6.1",
+      "pgo-version": "4.6.2",
       "pgouser": "pgoadmin"
     },
     "name": "fromcrd",
@@ -45,7 +45,7 @@
       "supplementalgroups": ""
     },
     "ccpimage": "crunchy-postgres-ha",
-    "ccpimagetag": "centos8-13.2-4.6.1",
+    "ccpimagetag": "centos8-13.2-4.6.2",
     "clustername": "fromcrd",
     "database": "userdb",
     "exporterport": "9187",
@@ -60,7 +60,7 @@
     "port": "5432",
     "user": "testuser",
     "userlabels": {
-      "pgo-version": "4.6.1"
+      "pgo-version": "4.6.2"
     }
   }
 }

examples/envs.sh

@@ -20,7 +20,7 @@ export PGO_CONF_DIR=$PGOROOT/installers/ansible/roles/pgo-operator/files
 # the version of the Operator you run is set by these vars
 export PGO_IMAGE_PREFIX=registry.developers.crunchydata.com/crunchydata
 export PGO_BASEOS=centos8
-export PGO_VERSION=4.6.1
+export PGO_VERSION=4.6.2
 export PGO_IMAGE_TAG=$PGO_BASEOS-$PGO_VERSION
 
 # for setting the pgo apiserver port, disabling TLS or not verifying TLS

examples/helm/README.md

@@ -64,7 +64,7 @@ The following values can also be set:
 - `ha`: Whether or not to deploy a high availability PostgreSQL cluster. Can be either `true` or `false`, defaults to `false`.
 - `imagePrefix`: The prefix of the container images to use for this PostgreSQL cluster. Default to `registry.developers.crunchydata.com/crunchydata`.
 - `image`: The name of the container image to use for the PostgreSQL cluster. Defaults to `crunchy-postgres-ha`.
-- `imageTag`: The container image tag to use. Defaults to `centos8-13.2-4.6.1`.
+- `imageTag`: The container image tag to use. Defaults to `centos8-13.2-4.6.2`.
 - `memory`: The memory limit for the PostgreSQL cluster. Follows standard Kubernetes formatting.
 - `monitoring`: Whether or not to enable monitoring / metrics collection for this PostgreSQL instance. Can either be `true` or `false`, defaults to `false`.
 
@@ -103,7 +103,7 @@ PGPASSWORD="W4tch0ut4hippo$" psql -h localhost -U hippo hippo
 
 ## Notes
 
-Prior to PostgreSQL Operator 4.6.1, you will have to manually clean up some of the artifacts when running `helm uninstall`.
+Prior to PostgreSQL Operator 4.6.2, you will have to manually clean up some of the artifacts when running `helm uninstall`.
 
 ## Additional Resources
 

examples/helm/postgres/Chart.yaml

@@ -20,4 +20,4 @@ version: 0.2.0
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to
 # follow Semantic Versioning. They should reflect the version the application is using.
-appVersion: 4.6.1
+appVersion: 4.6.2

examples/helm/postgres/templates/pgcluster.yaml

@@ -28,7 +28,7 @@ spec:
     storagetype: dynamic
   ccpimage: {{ .Values.image | default "crunchy-postgres-ha" | quote }}
   ccpimageprefix: {{ .Values.imagePrefix | default "registry.developers.crunchydata.com/crunchydata" | quote }}
-  ccpimagetag: {{ .Values.imageTag | default "centos8-13.2-4.6.1" | quote }}
+  ccpimagetag: {{ .Values.imageTag | default "centos8-13.2-4.6.2" | quote }}
   clustername: {{ .Values.name | quote }}
   database: {{ .Values.name | quote }}
   {{- if .Values.monitoring }}

examples/helm/postgres/values.yaml

@@ -10,5 +10,5 @@ password: W4tch0ut4hippo$
 # ha: true
 # imagePrefix: registry.developers.crunchydata.com/crunchydata
 # image: crunchy-postgres-ha
-# imageTag: centos8-13.2-4.6.1
+# imageTag: centos8-13.2-4.6.2
 # memory: 1Gi

examples/kustomize/createcluster/README.md

@@ -44,13 +44,13 @@ pgo show cluster hippo -n pgo
 ```
 You will see something like this if successful:
 ```
-cluster : hippo (crunchy-postgres-ha:centos8-13.2-4.6.1)
+cluster : hippo (crunchy-postgres-ha:centos8-13.2-4.6.2)
 	pod : hippo-8fb6bd96-j87wq (Running) on gke-xxxx-default-pool-38e946bd-257w (1/1) (primary)
 		pvc: hippo (1Gi)
 	deployment : hippo
 	deployment : hippo-backrest-shared-repo
 	service : hippo - ClusterIP (10.0.56.86) - Ports (2022/TCP, 5432/TCP)
-	labels : pgo-version=4.6.1 name=hippo crunchy-pgha-scope=hippo deployment-name=hippo pg-cluster=hippo pgouser=admin vendor=crunchydata
+	labels : pgo-version=4.6.2 name=hippo crunchy-pgha-scope=hippo deployment-name=hippo pg-cluster=hippo pgouser=admin vendor=crunchydata
 ```
 Feel free to run other pgo cli commands on the hippo cluster
 
@@ -79,15 +79,15 @@ pgo show cluster dev-hippo -n pgo
 ```
 You will see something like this if successful:
 ```
-cluster : dev-hippo (crunchy-postgres-ha:centos8-13.2-4.6.1)
+cluster : dev-hippo (crunchy-postgres-ha:centos8-13.2-4.6.2)
 	pod : dev-hippo-588d4cb746-bwrxb (Running) on gke-xxxx-default-pool-95cba91c-0ppp (1/1) (primary)
 		pvc: dev-hippo (1Gi)
 	deployment : dev-hippo
 	deployment : dev-hippo-backrest-shared-repo
 	deployment : dev-hippo-pgbouncer
 	service : dev-hippo - ClusterIP (10.0.62.87) - Ports (2022/TCP, 5432/TCP)
 	service : dev-hippo-pgbouncer - ClusterIP (10.0.48.120) - Ports (5432/TCP)
-	labels : crunchy-pgha-scope=dev-hippo name=dev-hippo pg-cluster=dev-hippo vendor=crunchydata deployment-name=dev-hippo environment=development pgo-version=4.6.1 pgouser=admin
+	labels : crunchy-pgha-scope=dev-hippo name=dev-hippo pg-cluster=dev-hippo vendor=crunchydata deployment-name=dev-hippo environment=development pgo-version=4.6.2 pgouser=admin
 ```
 #### staging
 The staging overlay will deploy a crunchy postgreSQL cluster with 2 replica's with annotations added
@@ -113,7 +113,7 @@ pgo show cluster staging-hippo -n pgo
 ```
 You will see something like this if successful, (Notice one of the replicas is a different size):
 ```
-cluster : staging-hippo (crunchy-postgres-ha:centos8-13.2-4.6.1)
+cluster : staging-hippo (crunchy-postgres-ha:centos8-13.2-4.6.2)
 	pod : staging-hippo-85cf6dcb65-9h748 (Running) on gke-xxxx-default-pool-95cba91c-0ppp (1/1) (primary)
 		pvc: staging-hippo (1Gi)
 	pod : staging-hippo-lnxw-cf47d8c8b-6r4wn (Running) on gke-xxxx-default-pool-21b7282d-rqkj (1/1) (replica)
@@ -128,7 +128,7 @@ cluster : staging-hippo (crunchy-postgres-ha:centos8-13.2-4.6.1)
 	service : staging-hippo-replica - ClusterIP (10.0.56.57) - Ports (2022/TCP, 5432/TCP)
 	pgreplica : staging-hippo-lnxw
 	pgreplica : staging-hippo-rpl1
-	labels : deployment-name=staging-hippo environment=staging name=staging-hippo crunchy-pgha-scope=staging-hippo pg-cluster=staging-hippo pgo-version=4.6.1 pgouser=admin vendor=crunchydata
+	labels : deployment-name=staging-hippo environment=staging name=staging-hippo crunchy-pgha-scope=staging-hippo pg-cluster=staging-hippo pgo-version=4.6.2 pgouser=admin vendor=crunchydata
 ```
 
 #### production
@@ -154,7 +154,7 @@ pgo show cluster prod-hippo -n pgo
 ```
 You will see something like this if successful, (Notice one of the replicas is a different size):
 ```
-cluster : prod-hippo (crunchy-postgres-ha:centos8-13.2-4.6.1)
+cluster : prod-hippo (crunchy-postgres-ha:centos8-13.2-4.6.2)
 	pod : prod-hippo-5d6dd46497-rr67c (Running) on gke-xxxx-default-pool-21b7282d-rqkj (1/1) (primary)
 		pvc: prod-hippo (1Gi)
 	pod : prod-hippo-flty-84d97c8769-2pzbh (Running) on gke-xxxx-default-pool-95cba91c-0ppp (1/1) (replica)
@@ -165,7 +165,7 @@ cluster : prod-hippo (crunchy-postgres-ha:centos8-13.2-4.6.1)
 	service : prod-hippo - ClusterIP (10.0.56.18) - Ports (2022/TCP, 5432/TCP)
 	service : prod-hippo-replica - ClusterIP (10.0.56.101) - Ports (2022/TCP, 5432/TCP)
 	pgreplica : prod-hippo-flty
-	labels : pgo-version=4.6.1 deployment-name=prod-hippo environment=production pg-cluster=prod-hippo crunchy-pgha-scope=prod-hippo name=prod-hippo pgouser=admin vendor=crunchydata
+	labels : pgo-version=4.6.2 deployment-name=prod-hippo environment=production pg-cluster=prod-hippo crunchy-pgha-scope=prod-hippo name=prod-hippo pgouser=admin vendor=crunchydata
 ```
 ### Delete the clusters
 To delete the clusters run the following pgo cli commands

examples/kustomize/createcluster/base/pgcluster.yaml

@@ -10,7 +10,7 @@ metadata:
     deployment-name: hippo
     name: hippo
     pg-cluster: hippo
-    pgo-version: 4.6.1
+    pgo-version: 4.6.2
     pgouser: admin
   name: hippo
   namespace: pgo
@@ -46,7 +46,7 @@ spec:
     postgres: {}
   ccpimage: crunchy-postgres-ha
   ccpimageprefix: registry.developers.crunchydata.com/crunchydata
-  ccpimagetag: centos8-13.2-4.6.1
+  ccpimagetag: centos8-13.2-4.6.2
   clustername: hippo
   customconfig: ""
   database: hippo
@@ -69,4 +69,4 @@ spec:
   port: "5432"
   user: hippo
   userlabels:
-    pgo-version: 4.6.1
+    pgo-version: 4.6.2

examples/kustomize/createcluster/overlay/staging/hippo-rpl1-pgreplica.yaml

@@ -20,4 +20,4 @@ spec:
     storagetype: dynamic
     supplementalgroups: ""
   userlabels:
-    pgo-version: 4.6.1
+    pgo-version: 4.6.2

installers/ansible/README.md

@@ -4,7 +4,7 @@
   <img width="150" src="../../crunchy_logo.png" alt="Crunchy Data"/>
 </p>
 
-Latest Release: 4.6.1
+Latest Release: 4.6.2
 
 ## General
 

installers/ansible/values.yaml

@@ -17,7 +17,7 @@ badger: "false"
 ccp_image_prefix: "registry.developers.crunchydata.com/crunchydata"
 ccp_image_pull_secret: ""
 ccp_image_pull_secret_manifest: ""
-ccp_image_tag: "centos8-13.2-4.6.1"
+ccp_image_tag: "centos8-13.2-4.6.2"
 create_rbac: "true"
 crunchy_debug: "false"
 db_name: ""
@@ -49,14 +49,14 @@ pgo_apiserver_url: "https://postgres-operator"
 pgo_client_cert_secret: "pgo.tls"
 pgo_client_container_install: "false"
 pgo_client_install: "true"
-pgo_client_version: "4.6.1"
+pgo_client_version: "4.6.2"
 pgo_cluster_admin: "false"
 pgo_disable_eventing: "false"
 pgo_disable_tls: "false"
 pgo_image_prefix: "registry.developers.crunchydata.com/crunchydata"
 pgo_image_pull_secret: ""
 pgo_image_pull_secret_manifest: ""
-pgo_image_tag: "centos8-4.6.1"
+pgo_image_tag: "centos8-4.6.2"
 pgo_installation_name: "devtest"
 pgo_noauth_routes: ""
 pgo_operator_namespace: "pgo"

installers/gcp-marketplace/Makefile

@@ -6,7 +6,7 @@ MARKETPLACE_TOOLS ?= gcr.io/cloud-marketplace-tools/k8s/dev:$(MARKETPLACE_VERSIO
 MARKETPLACE_VERSION ?= 0.9.4
 KUBECONFIG ?= $(HOME)/.kube/config
 PARAMETERS ?= {}
-PGO_VERSION ?= 4.6.1
+PGO_VERSION ?= 4.6.2
 
 IMAGE_BUILD_ARGS = --build-arg MARKETPLACE_VERSION='$(MARKETPLACE_VERSION)' \
 		   --build-arg PGO_VERSION='$(PGO_VERSION)'

installers/gcp-marketplace/README.md

@@ -59,7 +59,7 @@ Google Cloud Marketplace.
       ```shell
       IMAGE_REPOSITORY=gcr.io/crunchydata-public/postgres-operator
 
-      export PGO_VERSION=4.6.1
+      export PGO_VERSION=4.6.2
       export INSTALLER_IMAGE=${IMAGE_REPOSITORY}/deployer:${PGO_VERSION}
       export OPERATOR_IMAGE=${IMAGE_REPOSITORY}:${PGO_VERSION}
       export OPERATOR_IMAGE_API=${IMAGE_REPOSITORY}/pgo-apiserver:${PGO_VERSION}

installers/gcp-marketplace/values.yaml

@@ -10,7 +10,7 @@ badger: "false"
 ccp_image_prefix: "registry.developers.crunchydata.com/crunchydata"
 ccp_image_pull_secret: ""
 ccp_image_pull_secret_manifest: ""
-ccp_image_tag: "centos8-13.2-4.6.1"
+ccp_image_tag: "centos8-13.2-4.6.2"
 create_rbac: "true"
 db_name: ""
 db_password_age_days: "0"
@@ -32,9 +32,9 @@ pgo_admin_role_name: "pgoadmin"
 pgo_admin_username: "admin"
 pgo_client_container_install: "false"
 pgo_client_install: 'false'
-pgo_client_version: "4.6.1"
+pgo_client_version: "4.6.2"
 pgo_image_prefix: "registry.developers.crunchydata.com/crunchydata"
-pgo_image_tag: "centos8-4.6.1"
+pgo_image_tag: "centos8-4.6.2"
 pgo_installation_name: '${OPERATOR_NAME}'
 pgo_operator_namespace: '${OPERATOR_NAMESPACE}'
 scheduler_timeout: "3600"

installers/helm/Chart.yaml

@@ -3,7 +3,7 @@ name: postgres-operator
 description: Crunchy PostgreSQL Operator Helm chart for Kubernetes
 type: application
 version: 0.2.0
-appVersion: 4.6.1
+appVersion: 4.6.2
 home: https://github.com/CrunchyData/postgres-operator
 icon: https://github.com/CrunchyData/postgres-operator/raw/master/crunchy_logo.png
 keywords:

installers/helm/values.yaml

@@ -37,7 +37,7 @@ badger: "false"
 ccp_image_prefix: "registry.developers.crunchydata.com/crunchydata"
 ccp_image_pull_secret: ""
 ccp_image_pull_secret_manifest: ""
-ccp_image_tag: "centos8-13.2-4.6.1"
+ccp_image_tag: "centos8-13.2-4.6.2"
 create_rbac: "true"
 crunchy_debug: "false"
 db_name: ""
@@ -69,14 +69,14 @@ pgo_apiserver_url: "https://postgres-operator"
 pgo_client_cert_secret: "pgo.tls"
 pgo_client_container_install: "false"
 pgo_client_install: "true"
-pgo_client_version: "4.6.1"
+pgo_client_version: "4.6.2"
 pgo_cluster_admin: "false"
 pgo_disable_eventing: "false"
 pgo_disable_tls: "false"
 pgo_image_prefix: "registry.developers.crunchydata.com/crunchydata"
 pgo_image_pull_secret: ""
 pgo_image_pull_secret_manifest: ""
-pgo_image_tag: "centos8-4.6.1"
+pgo_image_tag: "centos8-4.6.2"
 pgo_installation_name: "devtest"
 pgo_noauth_routes: ""
 pgo_operator_namespace: "pgo"

installers/kubectl/client-setup.sh

@@ -14,7 +14,7 @@
 # This script should be run after the operator has been deployed
 PGO_OPERATOR_NAMESPACE="${PGO_OPERATOR_NAMESPACE:-pgo}"
 PGO_USER_ADMIN="${PGO_USER_ADMIN:-pgouser-admin}"
-PGO_CLIENT_VERSION="${PGO_CLIENT_VERSION:-v4.6.1}"
+PGO_CLIENT_VERSION="${PGO_CLIENT_VERSION:-v4.6.2}"
 PGO_CLIENT_URL="https://github.com/CrunchyData/postgres-operator/releases/download/${PGO_CLIENT_VERSION}"
 
 PGO_CMD="${PGO_CMD-kubectl}"