feat(helm)!: Update postgresql ( 14.3.3 → 15.2.5 )

[bot-akira]

This PR contains the following updates:

Package	Update	Change
postgresql (source)	major	14.3.3 -> 15.2.5

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[bot-akira]

--- kubernetes/apps/database/postgres/app Kustomization: flux-system/cluster-apps-database-postgres HelmRelease: database/postgresql

+++ kubernetes/apps/database/postgres/app Kustomization: flux-system/cluster-apps-database-postgres HelmRelease: database/postgresql

@@ -12,13 +12,13 @@

     spec:
       chart: postgresql
       sourceRef:
         kind: HelmRepository
         name: bitnami
         namespace: flux-system
-      version: 14.3.3
+      version: 15.2.5
   dependsOn:
   - name: longhorn
     namespace: longhorn-system
   install:
     remediation:
       retries: 3

[bot-akira]

--- HelmRelease: database/postgresql StatefulSet: database/postgresql

+++ HelmRelease: database/postgresql StatefulSet: database/postgresql

@@ -58,17 +58,17 @@

         securityContext:
           allowPrivilegeEscalation: false
           capabilities:
             drop:
             - ALL
           privileged: false
-          readOnlyRootFilesystem: false
-          runAsGroup: 0
+          readOnlyRootFilesystem: true
+          runAsGroup: 1001
           runAsNonRoot: true
           runAsUser: 1001
-          seLinuxOptions: null
+          seLinuxOptions: {}
           seccompProfile:
             type: RuntimeDefault
         env:
         - name: BITNAMI_DEBUG
           value: 'false'
         - name: POSTGRESQL_PORT_NUMBER
@@ -125,12 +125,21 @@

             - /bin/sh
             - -c
             - -e
             - |
               exec pg_isready -U "postgres" -d "dbname=postgres" -h 127.0.0.1 -p 5432
               [ -f /opt/bitnami/postgresql/tmp/.initialized ] || [ -f /bitnami/postgresql/.initialized ]
+        resources:
+          limits:
+            cpu: 150m
+            ephemeral-storage: 1024Mi
+            memory: 192Mi
+          requests:
+            cpu: 100m
+            ephemeral-storage: 50Mi
+            memory: 128Mi
         volumeMounts:
         - name: empty-dir
           mountPath: /tmp
           subPath: tmp-dir
         - name: empty-dir
           mountPath: /opt/bitnami/postgresql/conf
@@ -143,25 +152,25 @@

           subPath: app-logs-dir
         - name: dshm
           mountPath: /dev/shm
         - name: data
           mountPath: /bitnami/postgresql
       - name: metrics
-        image: docker.io/bitnami/postgres-exporter:0.15.0-debian-12-r14
+        image: docker.io/bitnami/postgres-exporter:0.15.0-debian-12-r16
         imagePullPolicy: IfNotPresent
         securityContext:
           allowPrivilegeEscalation: false
           capabilities:
             drop:
             - ALL
           privileged: false
-          readOnlyRootFilesystem: false
-          runAsGroup: 0
+          readOnlyRootFilesystem: true
+          runAsGroup: 1001
           runAsNonRoot: true
           runAsUser: 1001
-          seLinuxOptions: null
+          seLinuxOptions: {}
           seccompProfile:
             type: RuntimeDefault
         env:
         - name: DATA_SOURCE_URI
           value: 127.0.0.1:5432/postgres?sslmode=disable
         - name: DATA_SOURCE_PASS
@@ -193,12 +202,21 @@

             path: /
             port: http-metrics
         volumeMounts:
         - name: empty-dir
           mountPath: /tmp
           subPath: tmp-dir
+        resources:
+          limits:
+            cpu: 150m
+            ephemeral-storage: 1024Mi
+            memory: 192Mi
+          requests:
+            cpu: 100m
+            ephemeral-storage: 50Mi
+            memory: 128Mi
       volumes:
       - name: empty-dir
         emptyDir: {}
       - name: dshm
         emptyDir:
           medium: Memory

[axeII]

🦙 MegaLinter status: ✅ SUCCESS

Descriptor	Linter	Files	Fixed	Errors	Elapsed time

See detailed report in MegaLinter reports
Set VALIDATE_ALL_CODEBASE: true in mega-linter.yml to validate all sources, not only the diff

MegaLinter is graciously provided by