Update Helm release postgresql to v12.11.2

Signed-off-by: Renovate Bot <[email protected]>
projectsyn · Sep 18, 2023 · c04f1ef · c04f1ef
1 parent d31208b
commit c04f1ef
Show file tree

Hide file tree

Showing 9 changed files with 47 additions and 27 deletions.
diff --git a/class/defaults.yml b/class/defaults.yml
@@ -62,7 +62,7 @@ parameters:
         version: v2.2.2
       postgresql:
         source: https://charts.bitnami.com/bitnami
-        version: v12.5.6
+        version: 12.11.2
     # FQDN should be overwritten on the cluster level
     fqdn: keycloak.example.com
     # Disables dynamically resolving the hostname from request headers.

diff --git a/...tin/builtin/builtin/01_keycloak_helmchart/postgresql/templates/primary/networkpolicy.yaml b/...tin/builtin/builtin/01_keycloak_helmchart/postgresql/templates/primary/networkpolicy.yaml
@@ -6,7 +6,7 @@ metadata:
     app.kubernetes.io/instance: keycloak
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: postgresql
-    helm.sh/chart: postgresql-12.5.6
+    helm.sh/chart: postgresql-12.11.2
   name: keycloak-postgresql-ingress
   namespace: syn-builtin
 spec:

diff --git a/...iltin/builtin/builtin/01_keycloak_helmchart/postgresql/templates/primary/statefulset.yaml b/...iltin/builtin/builtin/01_keycloak_helmchart/postgresql/templates/primary/statefulset.yaml
@@ -2,11 +2,11 @@ apiVersion: apps/v1
 kind: StatefulSet
 metadata:
   labels:
-    app.kubernetes.io/component: keycloak
+    app.kubernetes.io/component: primary
     app.kubernetes.io/instance: builtin
     app.kubernetes.io/managed-by: commodore
     app.kubernetes.io/name: keycloak
-    helm.sh/chart: postgresql-12.5.6
+    helm.sh/chart: postgresql-12.11.2
   name: keycloak-postgresql
   namespace: syn-builtin
 spec:
@@ -28,7 +28,7 @@ spec:
         app.kubernetes.io/instance: keycloak
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/name: postgresql
-        helm.sh/chart: postgresql-12.5.6
+        helm.sh/chart: postgresql-12.11.2
       name: keycloak-postgresql
     spec:
       affinity:
@@ -56,17 +56,17 @@ spec:
               value: /bitnami/postgresql/data
             - name: POSTGRES_USER
               value: keycloak
-            - name: POSTGRES_POSTGRES_PASSWORD
+            - name: POSTGRES_PASSWORD
               valueFrom:
                 secretKeyRef:
-                  key: postgres-password
+                  key: password
                   name: keycloak-postgresql
-            - name: POSTGRES_PASSWORD
+            - name: POSTGRES_POSTGRES_PASSWORD
               valueFrom:
                 secretKeyRef:
-                  key: password
+                  key: postgres-password
                   name: keycloak-postgresql
-            - name: POSTGRES_DB
+            - name: POSTGRES_DATABASE
               value: keycloak
             - name: POSTGRESQL_ENABLE_LDAP
               value: 'no'
@@ -128,7 +128,15 @@ spec:
               cpu: 250m
               memory: 256Mi
           securityContext:
+            allowPrivilegeEscalation: false
+            capabilities:
+              drop:
+                - ALL
+            runAsGroup: 0
+            runAsNonRoot: true
             runAsUser: 1001
+            seccompProfile:
+              type: RuntimeDefault
           volumeMounts:
             - mountPath: /opt/bitnami/postgresql/certs
               name: postgresql-certificates
@@ -160,7 +168,11 @@ spec:
             limits: {}
             requests: {}
           securityContext:
+            runAsGroup: 0
+            runAsNonRoot: false
             runAsUser: 0
+            seccompProfile:
+              type: RuntimeDefault
           volumeMounts:
             - mountPath: /bitnami/postgresql
               name: data
@@ -186,7 +198,9 @@ spec:
     rollingUpdate: {}
     type: RollingUpdate
   volumeClaimTemplates:
-    - metadata:
+    - apiVersion: v1
+      kind: PersistentVolumeClaim
+      metadata:
         name: data
       spec:
         accessModes:

diff --git a/...ltin/builtin/builtin/01_keycloak_helmchart/postgresql/templates/primary/svc-headless.yaml b/...ltin/builtin/builtin/01_keycloak_helmchart/postgresql/templates/primary/svc-headless.yaml
@@ -1,13 +1,14 @@
 apiVersion: v1
 kind: Service
 metadata:
+  annotations:
+    service.alpha.kubernetes.io/tolerate-unready-endpoints: 'true'
   labels:
     app.kubernetes.io/component: primary
     app.kubernetes.io/instance: keycloak
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: postgresql
-    helm.sh/chart: postgresql-12.5.6
-    service.alpha.kubernetes.io/tolerate-unready-endpoints: 'true'
+    helm.sh/chart: postgresql-12.11.2
   name: keycloak-postgresql-hl
   namespace: syn-builtin
 spec:

diff --git a/...olden/builtin/builtin/builtin/01_keycloak_helmchart/postgresql/templates/primary/svc.yaml b/...olden/builtin/builtin/builtin/01_keycloak_helmchart/postgresql/templates/primary/svc.yaml
@@ -6,7 +6,7 @@ metadata:
     app.kubernetes.io/instance: keycloak
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: postgresql
-    helm.sh/chart: postgresql-12.5.6
+    helm.sh/chart: postgresql-12.11.2
   name: keycloak-postgresql
   namespace: syn-builtin
 spec:

diff --git a/.../openshift-postgres/01_keycloak_helmchart/postgresql/templates/primary/networkpolicy.yaml b/.../openshift-postgres/01_keycloak_helmchart/postgresql/templates/primary/networkpolicy.yaml
@@ -6,7 +6,7 @@ metadata:
     app.kubernetes.io/instance: keycloak
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: postgresql
-    helm.sh/chart: postgresql-12.5.6
+    helm.sh/chart: postgresql-12.11.2
   name: keycloak-postgresql-ingress
   namespace: syn-openshift-postgres
 spec:

diff --git a/...es/openshift-postgres/01_keycloak_helmchart/postgresql/templates/primary/statefulset.yaml b/...es/openshift-postgres/01_keycloak_helmchart/postgresql/templates/primary/statefulset.yaml
@@ -2,11 +2,11 @@ apiVersion: apps/v1
 kind: StatefulSet
 metadata:
   labels:
-    app.kubernetes.io/component: keycloak
+    app.kubernetes.io/component: primary
     app.kubernetes.io/instance: openshift-postgres
     app.kubernetes.io/managed-by: commodore
     app.kubernetes.io/name: keycloak
-    helm.sh/chart: postgresql-12.5.6
+    helm.sh/chart: postgresql-12.11.2
   name: keycloak-postgresql
   namespace: syn-openshift-postgres
 spec:
@@ -28,7 +28,7 @@ spec:
         app.kubernetes.io/instance: keycloak
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/name: postgresql
-        helm.sh/chart: postgresql-12.5.6
+        helm.sh/chart: postgresql-12.11.2
       name: keycloak-postgresql
     spec:
       affinity:
@@ -56,17 +56,17 @@ spec:
               value: /bitnami/postgresql/data
             - name: POSTGRES_USER
               value: keycloak
-            - name: POSTGRES_POSTGRES_PASSWORD
+            - name: POSTGRES_PASSWORD
               valueFrom:
                 secretKeyRef:
-                  key: postgres-password
+                  key: password
                   name: keycloak-postgresql
-            - name: POSTGRES_PASSWORD
+            - name: POSTGRES_POSTGRES_PASSWORD
               valueFrom:
                 secretKeyRef:
-                  key: password
+                  key: postgres-password
                   name: keycloak-postgresql
-            - name: POSTGRES_DB
+            - name: POSTGRES_DATABASE
               value: keycloak
             - name: POSTGRESQL_ENABLE_LDAP
               value: 'no'
@@ -132,6 +132,7 @@ spec:
             capabilities:
               drop:
                 - ALL
+            runAsGroup: 0
             runAsNonRoot: true
             seccompProfile:
               type: RuntimeDefault
@@ -163,6 +164,7 @@ spec:
             capabilities:
               drop:
                 - ALL
+            runAsGroup: 0
             runAsNonRoot: true
             seccompProfile:
               type: RuntimeDefault
@@ -185,7 +187,9 @@ spec:
     rollingUpdate: {}
     type: RollingUpdate
   volumeClaimTemplates:
-    - metadata:
+    - apiVersion: v1
+      kind: PersistentVolumeClaim
+      metadata:
         name: data
       spec:
         accessModes:

diff --git a/...s/openshift-postgres/01_keycloak_helmchart/postgresql/templates/primary/svc-headless.yaml b/...s/openshift-postgres/01_keycloak_helmchart/postgresql/templates/primary/svc-headless.yaml
@@ -1,13 +1,14 @@
 apiVersion: v1
 kind: Service
 metadata:
+  annotations:
+    service.alpha.kubernetes.io/tolerate-unready-endpoints: 'true'
   labels:
     app.kubernetes.io/component: primary
     app.kubernetes.io/instance: keycloak
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: postgresql
-    helm.sh/chart: postgresql-12.5.6
-    service.alpha.kubernetes.io/tolerate-unready-endpoints: 'true'
+    helm.sh/chart: postgresql-12.11.2
   name: keycloak-postgresql-hl
   namespace: syn-openshift-postgres
 spec:

diff --git a/...t-postgres/openshift-postgres/01_keycloak_helmchart/postgresql/templates/primary/svc.yaml b/...t-postgres/openshift-postgres/01_keycloak_helmchart/postgresql/templates/primary/svc.yaml
@@ -6,7 +6,7 @@ metadata:
     app.kubernetes.io/instance: keycloak
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: postgresql
-    helm.sh/chart: postgresql-12.5.6
+    helm.sh/chart: postgresql-12.11.2
   name: keycloak-postgresql
   namespace: syn-openshift-postgres
 spec: