Release Announcement Cloud Native PostgreSQL 1.4.0

Version 1.4.0

Type

Standard output logging of PostgreSQL error messages in JSON format

Feature

Provide a basic set of PostgreSQL metrics for the Prometheus exporter

Feature

Add the restart command to the cnp plugin for kubectl to restart

the pods of a given PostgreSQL cluster in a rollout fashion

Feature

Set readOnlyRootFilesystem security context for pods

Security Enhancement

Fix the labels that are automatically defined by the operator, renaming them from control-plane: controller-manager to app.kubernetes.io/name: cloud-native-postgresql

Change

Assign the ‘metrics name’ to the TCP port for the Prometheus exporter

Change

Set ‘cnp_metrics_exporter’ as the application_name to the metrics exporter connection in PostgreSQL

Change

When present, use the application database for monitoring queries of the Prometheus exporter instead of the “postgres” database

Change

Documentation improvements:

• Customization of monitoring queries
• Operator upgrade instructions

Change

Avoid using -R when calling pg_basebackup

Bug Fix

Remove stack trace from error log when getting the status

Bug Fix

Version 1.3.0

Type

Inheritance of labels and annotations

Feature

Set resource limits for every container

Feature

Support for restricted security context constraint on Red Hat OpenShift to limit pod execution to a namespace allocated UID and SELinux context

Security Enhancement

Pod security contexts explicitly defined by the operator to run as non-root, non-privileged, and without privilege escalation

Security Enhancement

Prometheus exporter endpoint listening on port 9187 (port 8000 is now reserved to instance coordination with API server)

Change

Version 1.2.1

Type

ScheduledBackup are no longer owners of the Backups, meaning that backups are not removed when ScheduledBackup objects are deleted

Change

Version 1.2.0

Type

Introduce experimental support for custom monitoring queries as ConfigMap and Secret objects using a compatible syntax with postgres_exporter for Prometheus

Feature

Support Operator Lifecycle Manager (OLM) deployments, with a subsequent presence on OperatorHub.io

Feature

Expand license key support for company-wide usage (previous restrictions limited only to a single cluster namespace)

Feature

Enhance container security by applying guidelines from the US Department of Defense (DoD)'s Defense Information Systems Agency (DISA) and the Center for Internet Security (CIS) and verifying them directly in the pipeline with Dockle

Security Enhancement

Version 1.1.0

Type

Add ‘kubectl cnp status’ to pretty-print the status of a cluster, including JSON and YAML output

Feature

Add ‘kubectl cnp certificate’ to enable TLS authentication for client applications

Feature

Add the -ro service to route connections to the available hot standby replicas only, enabling offload of read-only queries from the cluster's primary instance

Feature

Rollback scaling down a cluster to a value lower than maxSyncReplicas

Change

Request a checkpoint before demoting a former primary

Change

Send SIGINT signal (fast shutdown) to PostgreSQL process on SIGTERM

Change