--- kubernetes/cluster-0/apps/db/cloudnative-pg/app Kustomization: flux-system/cluster-apps-cloudnative-pg HelmRelease: db/cloudnative-pg

    kubernetes/cluster-0/apps/db/cloudnative-pg/app Kustomization: flux-system/cluster-apps-cloudnative-pg HelmRelease: db/cloudnative-pg

@@ -12,13  12,13 @@

     spec:
       chart: cloudnative-pg
       sourceRef:
         kind: HelmRepository
         name: cloudnative-pg
         namespace: flux-system
-      version: 0.21.5
       version: 0.22.1
   install:
     remediation:
       retries: 3
   interval: 15m
   uninstall:
     keepHistory: false

--- HelmRelease: db/cloudnative-pg ConfigMap: db/cnpg-default-monitoring

    HelmRelease: db/cloudnative-pg ConfigMap: db/cnpg-default-monitoring

@@ -83,12  83,13 @@

       query: |
         SELECT datname
           , pg_catalog.pg_database_size(datname) AS size_bytes
           , pg_catalog.age(datfrozenxid) AS xid_age
           , pg_catalog.mxid_age(datminmxid) AS mxid_age
         FROM pg_catalog.pg_database
         WHERE datallowconn
       metrics:
         - datname:
             usage: "LABEL"
             description: "Name of the database"
         - size_bytes:
             usage: "GAUGE"
@@ -246,12  247,77 @@

         - buffers_backend_fsync:
             usage: "COUNTER"
             description: "Number of times a backend had to execute its own fsync call (normally the background writer handles those even when the backend does its own write)"
         - buffers_alloc:
             usage: "COUNTER"
             description: "Number of buffers allocated"
 
     pg_stat_bgwriter_17:
       runonserver: ">=17.0.0"
       name: pg_stat_bgwriter
       query: |
         SELECT buffers_clean
           , maxwritten_clean
           , buffers_alloc
           , EXTRACT(EPOCH FROM stats_reset) AS stats_reset_time
         FROM pg_catalog.pg_stat_bgwriter
       metrics:
         - buffers_clean:
             usage: "COUNTER"
             description: "Number of buffers written by the background writer"
         - maxwritten_clean:
             usage: "COUNTER"
             description: "Number of times the background writer stopped a cleaning scan because it had written too many buffers"
         - buffers_alloc:
             usage: "COUNTER"
             description: "Number of buffers allocated"
         - stats_reset_time:
             usage: "GAUGE"
             description: "Time at which these statistics were last reset"
 
     pg_stat_checkpointer:
       runonserver: ">=17.0.0"
       query: |
         SELECT num_timed AS checkpoints_timed
           , num_requested AS checkpoints_req
           , restartpoints_timed
           , restartpoints_req
           , restartpoints_done
           , write_time
           , sync_time
           , buffers_written
           , EXTRACT(EPOCH FROM stats_reset) AS stats_reset_time
         FROM pg_catalog.pg_stat_checkpointer
       metrics:
         - checkpoints_timed:
             usage: "COUNTER"
             description: "Number of scheduled checkpoints that have been performed"
         - checkpoints_req:
             usage: "COUNTER"
             description: "Number of requested checkpoints that have been performed"
         - restartpoints_timed:
             usage: "COUNTER"
             description: "Number of scheduled restartpoints due to timeout or after a failed attempt to perform it"
         - restartpoints_req:
             usage: "COUNTER"
             description: "Number of requested restartpoints that have been performed"
         - restartpoints_done:
             usage: "COUNTER"
             description: "Number of restartpoints that have been performed"
         - write_time:
             usage: "COUNTER"
             description: "Total amount of time that has been spent in the portion of processing checkpoints and restartpoints where files are written to disk, in milliseconds"
         - sync_time:
             usage: "COUNTER"
             description: "Total amount of time that has been spent in the portion of processing checkpoints and restartpoints where files are synchronized to disk, in milliseconds"
         - buffers_written:
             usage: "COUNTER"
             description: "Number of buffers written during checkpoints and restartpoints"
         - stats_reset_time:
             usage: "GAUGE"
             description: "Time at which these statistics were last reset"
 
     pg_stat_database:
       query: |
         SELECT datname
           , xact_commit
           , xact_rollback
--- HelmRelease: db/cloudnative-pg ClusterRole: db/cloudnative-pg

    HelmRelease: db/cloudnative-pg ClusterRole: db/cloudnative-pg

@@ -9,24  9,27 @@

     app.kubernetes.io/managed-by: Helm
 rules:
 - apiGroups:
   - ''
   resources:
   - configmaps
   - secrets
   - services
   verbs:
   - create
   - delete
   - get
   - list
   - patch
   - update
   - watch
 - apiGroups:
   - ''
   resources:
   - configmaps/status
   - secrets/status
   verbs:
   - get
   - patch
   - update
 - apiGroups:
   - ''
@@ -44,33  47,13 @@

   - list
   - watch
 - apiGroups:
   - ''
   resources:
   - persistentvolumeclaims
-  verbs:
-  - create
-  - delete
-  - get
-  - list
-  - patch
-  - watch
-- apiGroups:
-  - ''
-  resources:
   - pods
-  verbs:
-  - create
-  - delete
-  - get
-  - list
-  - patch
-  - watch
-- apiGroups:
-  - ''
-  resources:
   - pods/exec
   verbs:
   - create
   - delete
   - get
   - list
@@ -82,78  65,28 @@

   - pods/status
   verbs:
   - get
 - apiGroups:
   - ''
   resources:
-  - secrets
-  verbs:
-  - create
-  - delete
-  - get
-  - list
-  - patch
-  - update
-  - watch
-- apiGroups:
-  - ''
-  resources:
-  - secrets/status
-  verbs:
-  - get
-  - patch
-  - update
-- apiGroups:
-  - ''
-  resources:
   - serviceaccounts
   verbs:
   - create
   - get
   - list
   - patch
   - update
   - watch
 - apiGroups:
-  - ''
-  resources:
-  - services
-  verbs:
-  - create
-  - delete
-  - get
-  - list
-  - patch
-  - update
-  - watch
-- apiGroups:
   - admissionregistration.k8s.io
   resources:
   - mutatingwebhookconfigurations
-  verbs:
-  - get
-  - list
-  - patch
-  - update
-- apiGroups:
-  - admissionregistration.k8s.io
-  resources:
   - validatingwebhookconfigurations
   verbs:
   - get
-  - list
-  - patch
-  - update
-- apiGroups:
-  - apiextensions.k8s.io
-  resources:
-  - customresourcedefinitions
-  verbs:
-  - get
-  - list
-  - update
   - patch
 - apiGroups:
   - apps
   resources:
   - deployments
   verbs:
   - create
@@ -206,132  139,62 @@

   - update
   - watch
 - apiGroups:
   - postgresql.cnpg.io
   resources:
   - backups
   - clusters
   - poolers
   - scheduledbackups
   verbs:
   - create
   - delete
   - get
   - list
   - patch
   - update
   - watch
 - apiGroups:
   - postgresql.cnpg.io
   resources:
   - backups/status
   - scheduledbackups/status
   verbs:
   - get
   - patch
   - update
 - apiGroups:
   - postgresql.cnpg.io
   resources:
   - clusterimagecatalogs
-  verbs:
-  - get
-  - list
-  - watch
-- apiGroups:
-  - postgresql.cnpg.io
-  resources:
-  - clusters
-  verbs:
-  - create
-  - delete
-  - get
-  - list
-  - patch
-  - update
   - imagecatalogs
   verbs:
   - get
   - list
   - watch
 - apiGroups:
   - postgresql.cnpg.io
   resources:
   - clusters/finalizers
   - poolers/finalizers
   verbs:
   - update
 - apiGroups:
   - postgresql.cnpg.io
   resources:
   - clusters/status
-  verbs:
-  - get
-  - patch
-  - update
-  - watch
-- apiGroups:
-  - postgresql.cnpg.io
-  resources:
-  - imagecatalogs
-  verbs:
-  - get
-  - list
-  - watch
-- apiGroups:
-  - postgresql.cnpg.io
-  resources:
-  - poolers
-  verbs:
-  - create
-  - delete
-  - get
-  - list
-  - patch
-  - update
-  - watch
-- apiGroups:
-  - postgresql.cnpg.io
-  resources:
-  - poolers/finalizers
-  verbs:
-  - update
-- apiGroups:
-  - postgresql.cnpg.io
-  resources:
   - poolers/status
   verbs:
   - get
   - patch
   - update
   - watch
 - apiGroups:
-  - postgresql.cnpg.io
-  resources:
-  - scheduledbackups
-  verbs:
-  - create
-  - delete
-  - get
-  - list
-  - patch
-  - update
-  - watch
-- apiGroups:
-  - postgresql.cnpg.io
-  resources:
-  - scheduledbackups/status
-  verbs:
-  - get
-  - patch
-  - update
-- apiGroups:
   - rbac.authorization.k8s.io
   resources:
   - rolebindings
-  verbs:
-  - create
-  - get
-  - list
-  - patch
-  - update
-  - watch
-- apiGroups:
-  - rbac.authorization.k8s.io
-  resources:
   - roles
   verbs:
   - create
   - get
   - list
   - patch
--- HelmRelease: db/cloudnative-pg Deployment: db/cloudnative-pg

    HelmRelease: db/cloudnative-pg Deployment: db/cloudnative-pg

@@ -26,20  26,20 @@

         - --config-map-name=cnpg-controller-manager-config
         - --webhook-port=9443
         command:
         - /manager
         env:
         - name: OPERATOR_IMAGE_NAME
-          value: ghcr.io/cloudnative-pg/cloudnative-pg:1.23.2
           value: ghcr.io/cloudnative-pg/cloudnative-pg:1.24.1
         - name: OPERATOR_NAMESPACE
           valueFrom:
             fieldRef:
               fieldPath: metadata.namespace
         - name: MONITORING_QUERIES_CONFIGMAP
           value: cnpg-default-monitoring
-        image: ghcr.io/cloudnative-pg/cloudnative-pg:1.23.2
         image: ghcr.io/cloudnative-pg/cloudnative-pg:1.24.1
         imagePullPolicy: IfNotPresent
         livenessProbe:
           httpGet:
             path: /readyz
             port: 9443
             scheme: HTTPS