[bitnami/postgresql-ha] Release 14.0.1 (#24920)

* [bitnami/postgresql-ha] Release 14.0.1 updating components versions

Signed-off-by: Bitnami Containers <bitnami-bot@vmware.com>

* Update README.md with readme-generator-for-helm

Signed-off-by: Bitnami Containers <bitnami-bot@vmware.com>

---------

Signed-off-by: Bitnami Containers <bitnami-bot@vmware.com>
This commit is contained in:
Bitnami Bot
2024-04-05 02:33:32 +02:00
committed by GitHub
parent 59286bac08
commit 05b9fb2745
4 changed files with 470 additions and 470 deletions

View File

@@ -1,6 +1,6 @@
dependencies:
- name: common
repository: oci://registry-1.docker.io/bitnamicharts
version: 2.19.0
digest: sha256:ac559eb57710d8904e266424ee364cd686d7e24517871f0c5c67f7c4500c2bcc
generated: "2024-03-11T16:41:16.090622+01:00"
version: 2.19.1
digest: sha256:c883732817d9aaa3304f7b3109262aa338959de15b432dc5a2dbde13d2e136a5
generated: "2024-04-05T00:15:45.044757649Z"

View File

@@ -6,13 +6,13 @@ annotations:
licenses: Apache-2.0
images: |
- name: os-shell
image: docker.io/bitnami/os-shell:12-debian-12-r16
image: docker.io/bitnami/os-shell:12-debian-12-r18
- name: pgpool
image: docker.io/bitnami/pgpool:4.5.1-debian-12-r0
image: docker.io/bitnami/pgpool:4.5.1-debian-12-r2
- name: postgres-exporter
image: docker.io/bitnami/postgres-exporter:0.15.0-debian-12-r14
image: docker.io/bitnami/postgres-exporter:0.15.0-debian-12-r16
- name: postgresql-repmgr
image: docker.io/bitnami/postgresql-repmgr:16.2.0-debian-12-r6
image: docker.io/bitnami/postgresql-repmgr:16.2.0-debian-12-r8
apiVersion: v2
appVersion: 16.2.0
dependencies:
@@ -40,4 +40,4 @@ maintainers:
name: postgresql-ha
sources:
- https://github.com/bitnami/charts/tree/main/bitnami/postgresql-ha
version: 14.0.0
version: 14.0.1

View File

@@ -346,387 +346,387 @@ A default `StorageClass` is needed in the Kubernetes cluster to dynamically prov
### PostgreSQL with Repmgr parameters
| Name | Description | Value |
| -------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ----------------------------------- |
| `postgresql.image.registry` | PostgreSQL with Repmgr image registry | `REGISTRY_NAME` |
| `postgresql.image.repository` | PostgreSQL with Repmgr image repository | `REPOSITORY_NAME/postgresql-repmgr` |
| `postgresql.image.digest` | PostgreSQL image digest in the way sha256:aa.... Please note this parameter, if set, will override the tag | `""` |
| `postgresql.image.pullPolicy` | PostgreSQL with Repmgr image pull policy | `IfNotPresent` |
| `postgresql.image.pullSecrets` | Specify docker-registry secret names as an array | `[]` |
| `postgresql.image.debug` | Specify if debug logs should be enabled | `false` |
| `postgresql.labels` | Labels to add to the StatefulSet. Evaluated as template | `{}` |
| `postgresql.podLabels` | Labels to add to the StatefulSet pods. Evaluated as template | `{}` |
| `postgresql.serviceAnnotations` | Provide any additional annotations for PostgreSQL service | `{}` |
| `postgresql.replicaCount` | Number of replicas to deploy. Use an odd number. Having 3 replicas is the minimum to get quorum when promoting a new primary. | `3` |
| `postgresql.updateStrategy.type` | Postgresql statefulset strategy type | `RollingUpdate` |
| `postgresql.containerPorts.postgresql` | PostgreSQL port | `5432` |
| `postgresql.automountServiceAccountToken` | Mount Service Account token in pod | `false` |
| `postgresql.hostAliases` | Deployment pod host aliases | `[]` |
| `postgresql.hostNetwork` | Specify if host network should be enabled for PostgreSQL pod | `false` |
| `postgresql.hostIPC` | Specify if host IPC should be enabled for PostgreSQL pod | `false` |
| `postgresql.podAnnotations` | Additional pod annotations | `{}` |
| `postgresql.podAffinityPreset` | PostgreSQL pod affinity preset. Ignored if `postgresql.affinity` is set. Allowed values: `soft` or `hard` | `""` |
| `postgresql.podAntiAffinityPreset` | PostgreSQL pod anti-affinity preset. Ignored if `postgresql.affinity` is set. Allowed values: `soft` or `hard` | `soft` |
| `postgresql.nodeAffinityPreset.type` | PostgreSQL node affinity preset type. Ignored if `postgresql.affinity` is set. Allowed values: `soft` or `hard` | `""` |
| `postgresql.nodeAffinityPreset.key` | PostgreSQL node label key to match Ignored if `postgresql.affinity` is set. | `""` |
| `postgresql.nodeAffinityPreset.values` | PostgreSQL node label values to match. Ignored if `postgresql.affinity` is set. | `[]` |
| `postgresql.affinity` | Affinity for PostgreSQL pods assignment | `{}` |
| `postgresql.nodeSelector` | Node labels for PostgreSQL pods assignment | `{}` |
| `postgresql.tolerations` | Tolerations for PostgreSQL pods assignment | `[]` |
| `postgresql.topologySpreadConstraints` | Topology Spread Constraints for pod assignment spread across your cluster among failure-domains. Evaluated as a template | `[]` |
| `postgresql.priorityClassName` | Pod priority class | `""` |
| `postgresql.schedulerName` | Use an alternate scheduler, e.g. "stork". | `""` |
| `postgresql.terminationGracePeriodSeconds` | Seconds PostgreSQL pod needs to terminate gracefully | `""` |
| `postgresql.podSecurityContext.enabled` | Enable security context for PostgreSQL with Repmgr | `true` |
| `postgresql.podSecurityContext.fsGroupChangePolicy` | Set filesystem group change policy | `Always` |
| `postgresql.podSecurityContext.sysctls` | Set kernel settings using the sysctl interface | `[]` |
| `postgresql.podSecurityContext.supplementalGroups` | Set filesystem extra groups | `[]` |
| `postgresql.podSecurityContext.fsGroup` | Group ID for the PostgreSQL with Repmgr filesystem | `1001` |
| `postgresql.containerSecurityContext.enabled` | Enabled containers' Security Context | `true` |
| `postgresql.containerSecurityContext.seLinuxOptions` | Set SELinux options in container | `nil` |
| `postgresql.containerSecurityContext.runAsUser` | Set containers' Security Context runAsUser | `1001` |
| `postgresql.containerSecurityContext.runAsGroup` | Set containers' Security Context runAsGroup | `1001` |
| `postgresql.containerSecurityContext.runAsNonRoot` | Set container's Security Context runAsNonRoot | `true` |
| `postgresql.containerSecurityContext.privileged` | Set container's Security Context privileged | `false` |
| `postgresql.containerSecurityContext.readOnlyRootFilesystem` | Set container's Security Context readOnlyRootFilesystem | `true` |
| `postgresql.containerSecurityContext.allowPrivilegeEscalation` | Set container's Security Context allowPrivilegeEscalation | `false` |
| `postgresql.containerSecurityContext.capabilities.drop` | List of capabilities to be dropped | `["ALL"]` |
| `postgresql.containerSecurityContext.seccompProfile.type` | Set container's Security Context seccomp profile | `RuntimeDefault` |
| `postgresql.command` | Override default container command (useful when using custom images) | `[]` |
| `postgresql.args` | Override default container args (useful when using custom images) | `[]` |
| `postgresql.lifecycleHooks` | LifecycleHook to set additional configuration at startup, e.g. LDAP settings via REST API. Evaluated as a template | `{}` |
| `postgresql.extraEnvVars` | Array containing extra environment variables | `[]` |
| `postgresql.extraEnvVarsCM` | ConfigMap with extra environment variables | `""` |
| `postgresql.extraEnvVarsSecret` | Secret with extra environment variables | `""` |
| `postgresql.extraVolumes` | Extra volumes to add to the deployment | `[]` |
| `postgresql.extraVolumeMounts` | Extra volume mounts to add to the container. Normally used with `extraVolumes`. | `[]` |
| `postgresql.initContainers` | Extra init containers to add to the deployment | `[]` |
| `postgresql.sidecars` | Extra sidecar containers to add to the deployment | `[]` |
| `postgresql.resourcesPreset` | Set container resources according to one common preset (allowed values: none, nano, small, medium, large, xlarge, 2xlarge). This is ignored if postgresql.resources is set (postgresql.resources is recommended for production). | `micro` |
| `postgresql.resources` | Set container requests and limits for different resources like CPU or memory (essential for production workloads) | `{}` |
| `postgresql.podManagementPolicy` | sets the pod management policy | `Parallel` |
| `postgresql.livenessProbe.enabled` | Enable livenessProbe | `true` |
| `postgresql.livenessProbe.initialDelaySeconds` | Initial delay seconds for livenessProbe | `30` |
| `postgresql.livenessProbe.periodSeconds` | Period seconds for livenessProbe | `10` |
| `postgresql.livenessProbe.timeoutSeconds` | Timeout seconds for livenessProbe | `5` |
| `postgresql.livenessProbe.failureThreshold` | Failure threshold for livenessProbe | `6` |
| `postgresql.livenessProbe.successThreshold` | Success threshold for livenessProbe | `1` |
| `postgresql.readinessProbe.enabled` | Enable readinessProbe | `true` |
| `postgresql.readinessProbe.initialDelaySeconds` | Initial delay seconds for readinessProbe | `5` |
| `postgresql.readinessProbe.periodSeconds` | Period seconds for readinessProbe | `10` |
| `postgresql.readinessProbe.timeoutSeconds` | Timeout seconds for readinessProbe | `5` |
| `postgresql.readinessProbe.failureThreshold` | Failure threshold for readinessProbe | `6` |
| `postgresql.readinessProbe.successThreshold` | Success threshold for readinessProbe | `1` |
| `postgresql.startupProbe.enabled` | Enable startupProbe | `false` |
| `postgresql.startupProbe.initialDelaySeconds` | Initial delay seconds for startupProbe | `5` |
| `postgresql.startupProbe.periodSeconds` | Period seconds for startupProbe | `10` |
| `postgresql.startupProbe.timeoutSeconds` | Timeout seconds for startupProbe | `5` |
| `postgresql.startupProbe.failureThreshold` | Failure threshold for startupProbe | `10` |
| `postgresql.startupProbe.successThreshold` | Success threshold for startupProbe | `1` |
| `postgresql.customLivenessProbe` | Override default liveness probe | `{}` |
| `postgresql.customReadinessProbe` | Override default readiness probe | `{}` |
| `postgresql.customStartupProbe` | Override default startup probe | `{}` |
| `postgresql.networkPolicy.enabled` | Specifies whether a NetworkPolicy should be created | `true` |
| `postgresql.networkPolicy.allowExternal` | Don't require server label for connections | `true` |
| `postgresql.networkPolicy.allowExternalEgress` | Allow the pod to access any range of port and all destinations. | `true` |
| `postgresql.networkPolicy.extraIngress` | Add extra ingress rules to the NetworkPolice | `[]` |
| `postgresql.networkPolicy.extraEgress` | Add extra ingress rules to the NetworkPolicy | `[]` |
| `postgresql.networkPolicy.ingressNSMatchLabels` | Labels to match to allow traffic from other namespaces | `{}` |
| `postgresql.networkPolicy.ingressNSPodMatchLabels` | Pod labels to match to allow traffic from other namespaces | `{}` |
| `postgresql.pdb.create` | Specifies whether to create a Pod disruption budget for PostgreSQL with Repmgr | `false` |
| `postgresql.pdb.minAvailable` | Minimum number / percentage of pods that should remain scheduled | `1` |
| `postgresql.pdb.maxUnavailable` | Maximum number / percentage of pods that may be made unavailable | `""` |
| `postgresql.username` | PostgreSQL username | `postgres` |
| `postgresql.password` | PostgreSQL password | `""` |
| `postgresql.database` | PostgreSQL database | `""` |
| `postgresql.existingSecret` | PostgreSQL password using existing secret | `""` |
| `postgresql.postgresPassword` | PostgreSQL password for the `postgres` user when `username` is not `postgres` | `""` |
| `postgresql.usePasswordFile` | Set to `true` to mount PostgreSQL secret as a file instead of passing environment variable | `""` |
| `postgresql.repmgrUsePassfile` | Set to `true` to configure repmgrl to use `passfile` instead of `password` vars*:*:*:username:password" and use it to configure Repmgr instead of using password (Requires Postgresql 10+, otherwise ignored) | `""` |
| `postgresql.repmgrPassfilePath` | Custom path where `passfile` will be stored | `""` |
| `postgresql.upgradeRepmgrExtension` | Upgrade repmgr extension in the database | `false` |
| `postgresql.pgHbaTrustAll` | Configures PostgreSQL HBA to trust every user | `false` |
| `postgresql.syncReplication` | Make the replication synchronous. This will wait until the data is synchronized in all the replicas before other query can be run. This ensures the data availability at the expenses of speed. | `false` |
| `postgresql.syncReplicationMode` | This specifies the method to choose synchronous standbys from the listed servers. Valid values: empty, FIRST, ANY. | `""` |
| `postgresql.repmgrUsername` | PostgreSQL Repmgr username | `repmgr` |
| `postgresql.repmgrPassword` | PostgreSQL Repmgr password | `""` |
| `postgresql.repmgrDatabase` | PostgreSQL Repmgr database | `repmgr` |
| `postgresql.repmgrLogLevel` | Repmgr log level (DEBUG, INFO, NOTICE, WARNING, ERROR, ALERT, CRIT or EMERG) | `NOTICE` |
| `postgresql.repmgrConnectTimeout` | Repmgr backend connection timeout (in seconds) | `5` |
| `postgresql.repmgrReconnectAttempts` | Repmgr backend reconnection attempts | `2` |
| `postgresql.repmgrReconnectInterval` | Repmgr backend reconnection interval (in seconds) | `3` |
| `postgresql.repmgrFenceOldPrimary` | Set if fencing of old primary in multiple primary situation is desired | `false` |
| `postgresql.repmgrChildNodesCheckInterval` | Repmgr child nodes check interval (in seconds) | `5` |
| `postgresql.repmgrChildNodesConnectedMinCount` | Repmgr minimum number of connected child nodes before being considered as failed primary for fencing | `1` |
| `postgresql.repmgrChildNodesDisconnectTimeout` | Repmgr time before node will be fenced when insufficient child nodes are detected (in seconds) | `30` |
| `postgresql.usePgRewind` | Use pg_rewind for standby failover (experimental) | `false` |
| `postgresql.audit.logHostname` | Add client hostnames to the log file | `true` |
| `postgresql.audit.logConnections` | Add client log-in operations to the log file | `false` |
| `postgresql.audit.logDisconnections` | Add client log-outs operations to the log file | `false` |
| `postgresql.audit.pgAuditLog` | Add operations to log using the pgAudit extension | `""` |
| `postgresql.audit.pgAuditLogCatalog` | Log catalog using pgAudit | `off` |
| `postgresql.audit.clientMinMessages` | Message log level to share with the user | `error` |
| `postgresql.audit.logLinePrefix` | Template string for the log line prefix | `""` |
| `postgresql.audit.logTimezone` | Timezone for the log timestamps | `""` |
| `postgresql.sharedPreloadLibraries` | Shared preload libraries (comma-separated list) | `pgaudit, repmgr` |
| `postgresql.maxConnections` | Maximum total connections | `""` |
| `postgresql.postgresConnectionLimit` | Maximum connections for the postgres user | `""` |
| `postgresql.dbUserConnectionLimit` | Maximum connections for the created user | `""` |
| `postgresql.tcpKeepalivesInterval` | TCP keepalives interval | `""` |
| `postgresql.tcpKeepalivesIdle` | TCP keepalives idle | `""` |
| `postgresql.tcpKeepalivesCount` | TCP keepalives count | `""` |
| `postgresql.statementTimeout` | Statement timeout | `""` |
| `postgresql.pghbaRemoveFilters` | Comma-separated list of patterns to remove from the pg_hba.conf file | `""` |
| `postgresql.extraInitContainers` | Extra init containers | `[]` |
| `postgresql.repmgrConfiguration` | Repmgr configuration | `""` |
| `postgresql.configuration` | PostgreSQL configuration | `""` |
| `postgresql.pgHbaConfiguration` | PostgreSQL client authentication configuration | `""` |
| `postgresql.configurationCM` | Name of existing ConfigMap with configuration files | `""` |
| `postgresql.extendedConf` | Extended PostgreSQL configuration (appended to main or default configuration). Implies `volumePermissions.enabled`. | `""` |
| `postgresql.extendedConfCM` | ConfigMap with PostgreSQL extended configuration | `""` |
| `postgresql.initdbScripts` | Dictionary of initdb scripts | `{}` |
| `postgresql.initdbScriptsCM` | ConfigMap with scripts to be run at first boot | `""` |
| `postgresql.initdbScriptsSecret` | Secret with scripts to be run at first boot | `""` |
| `postgresql.tls.enabled` | Enable TLS traffic support for end-client connections | `false` |
| `postgresql.tls.preferServerCiphers` | Whether to use the server's TLS cipher preferences rather than the client's | `true` |
| `postgresql.tls.certificatesSecret` | Name of an existing secret that contains the certificates | `""` |
| `postgresql.tls.certFilename` | Certificate filename | `""` |
| `postgresql.tls.certKeyFilename` | Certificate key filename | `""` |
| `postgresql.preStopDelayAfterPgStopSeconds` | Minimal number of seconds preStop hook waits after postgres instance is stopped | `25` |
| `postgresql.headlessWithNotReadyAddresses` | set postgres headless service into publishNotReadyAddresses mode | `false` |
| `witness.create` | Create PostgreSQL witness nodes | `false` |
| `witness.labels` | Labels to add to the StatefulSet. Evaluated as template | `{}` |
| `witness.podLabels` | Labels to add to the StatefulSet pods. Evaluated as template | `{}` |
| `witness.replicaCount` | Number of replicas to deploy. | `1` |
| `witness.updateStrategy.type` | Postgresql statefulset strategy type | `RollingUpdate` |
| `witness.containerPorts.postgresql` | PostgreSQL witness port | `5432` |
| `witness.automountServiceAccountToken` | Mount Service Account token in pod | `false` |
| `witness.hostAliases` | Deployment pod host aliases | `[]` |
| `witness.hostNetwork` | Specify if host network should be enabled for PostgreSQL witness pod | `false` |
| `witness.hostIPC` | Specify if host IPC should be enabled for PostgreSQL witness pod | `false` |
| `witness.podAnnotations` | Additional pod annotations | `{}` |
| `witness.podAffinityPreset` | PostgreSQL witness pod affinity preset. Ignored if `witness.affinity` is set. Allowed values: `soft` or `hard` | `""` |
| `witness.podAntiAffinityPreset` | PostgreSQL witness pod anti-affinity preset. Ignored if `witness.affinity` is set. Allowed values: `soft` or `hard` | `soft` |
| `witness.nodeAffinityPreset.type` | PostgreSQL witness node affinity preset type. Ignored if `witness.affinity` is set. Allowed values: `soft` or `hard` | `""` |
| `witness.nodeAffinityPreset.key` | PostgreSQL witness node label key to match Ignored if `witness.affinity` is set. | `""` |
| `witness.nodeAffinityPreset.values` | PostgreSQL witness node label values to match. Ignored if `witness.affinity` is set. | `[]` |
| `witness.affinity` | Affinity for PostgreSQL witness pods assignment | `{}` |
| `witness.nodeSelector` | Node labels for PostgreSQL witness pods assignment | `{}` |
| `witness.tolerations` | Tolerations for PostgreSQL witness pods assignment | `[]` |
| `witness.topologySpreadConstraints` | Topology Spread Constraints for pod assignment spread across your cluster among failure-domains. Evaluated as a template | `[]` |
| `witness.priorityClassName` | Pod priority class | `""` |
| `witness.schedulerName` | Use an alternate scheduler, e.g. "stork". | `""` |
| `witness.terminationGracePeriodSeconds` | Seconds PostgreSQL witness pod needs to terminate gracefully | `""` |
| `witness.podSecurityContext.enabled` | Enable security context for PostgreSQL witness with Repmgr | `true` |
| `witness.podSecurityContext.fsGroupChangePolicy` | Set filesystem group change policy | `Always` |
| `witness.podSecurityContext.sysctls` | Set kernel settings using the sysctl interface | `[]` |
| `witness.podSecurityContext.supplementalGroups` | Set filesystem extra groups | `[]` |
| `witness.podSecurityContext.fsGroup` | Group ID for the PostgreSQL witness with Repmgr filesystem | `1001` |
| `witness.containerSecurityContext.enabled` | Enabled containers' Security Context | `true` |
| `witness.containerSecurityContext.seLinuxOptions` | Set SELinux options in container | `nil` |
| `witness.containerSecurityContext.runAsUser` | Set containers' Security Context runAsUser | `1001` |
| `witness.containerSecurityContext.runAsGroup` | Set containers' Security Context runAsGroup | `1001` |
| `witness.containerSecurityContext.runAsNonRoot` | Set container's Security Context runAsNonRoot | `true` |
| `witness.containerSecurityContext.privileged` | Set container's Security Context privileged | `false` |
| `witness.containerSecurityContext.readOnlyRootFilesystem` | Set container's Security Context readOnlyRootFilesystem | `true` |
| `witness.containerSecurityContext.allowPrivilegeEscalation` | Set container's Security Context allowPrivilegeEscalation | `false` |
| `witness.containerSecurityContext.capabilities.drop` | List of capabilities to be dropped | `["ALL"]` |
| `witness.containerSecurityContext.seccompProfile.type` | Set container's Security Context seccomp profile | `RuntimeDefault` |
| `witness.command` | Override default container command (useful when using custom images) | `[]` |
| `witness.args` | Override default container args (useful when using custom images) | `[]` |
| `witness.lifecycleHooks` | LifecycleHook to set additional configuration at startup, e.g. LDAP settings via REST API. Evaluated as a template | `{}` |
| `witness.extraEnvVars` | Array containing extra environment variables | `[]` |
| `witness.extraEnvVarsCM` | ConfigMap with extra environment variables | `""` |
| `witness.extraEnvVarsSecret` | Secret with extra environment variables | `""` |
| `witness.extraVolumes` | Extra volumes to add to the deployment | `[]` |
| `witness.extraVolumeMounts` | Extra volume mounts to add to the container. Normally used with `extraVolumes`. | `[]` |
| `witness.initContainers` | Extra init containers to add to the deployment | `[]` |
| `witness.sidecars` | Extra sidecar containers to add to the deployment | `[]` |
| `witness.resourcesPreset` | Set container resources according to one common preset (allowed values: none, nano, small, medium, large, xlarge, 2xlarge). This is ignored if witness.resources is set (witness.resources is recommended for production). | `micro` |
| `witness.resources` | Set container requests and limits for different resources like CPU or memory (essential for production workloads) | `{}` |
| `witness.livenessProbe.enabled` | Enable livenessProbe | `true` |
| `witness.livenessProbe.initialDelaySeconds` | Initial delay seconds for livenessProbe | `30` |
| `witness.livenessProbe.periodSeconds` | Period seconds for livenessProbe | `10` |
| `witness.livenessProbe.timeoutSeconds` | Timeout seconds for livenessProbe | `5` |
| `witness.livenessProbe.failureThreshold` | Failure threshold for livenessProbe | `6` |
| `witness.livenessProbe.successThreshold` | Success threshold for livenessProbe | `1` |
| `witness.readinessProbe.enabled` | Enable readinessProbe | `true` |
| `witness.readinessProbe.initialDelaySeconds` | Initial delay seconds for readinessProbe | `5` |
| `witness.readinessProbe.periodSeconds` | Period seconds for readinessProbe | `10` |
| `witness.readinessProbe.timeoutSeconds` | Timeout seconds for readinessProbe | `5` |
| `witness.readinessProbe.failureThreshold` | Failure threshold for readinessProbe | `6` |
| `witness.readinessProbe.successThreshold` | Success threshold for readinessProbe | `1` |
| `witness.startupProbe.enabled` | Enable startupProbe | `false` |
| `witness.startupProbe.initialDelaySeconds` | Initial delay seconds for startupProbe | `5` |
| `witness.startupProbe.periodSeconds` | Period seconds for startupProbe | `10` |
| `witness.startupProbe.timeoutSeconds` | Timeout seconds for startupProbe | `5` |
| `witness.startupProbe.failureThreshold` | Failure threshold for startupProbe | `10` |
| `witness.startupProbe.successThreshold` | Success threshold for startupProbe | `1` |
| `witness.customLivenessProbe` | Override default liveness probe | `{}` |
| `witness.customReadinessProbe` | Override default readiness probe | `{}` |
| `witness.customStartupProbe` | Override default startup probe | `{}` |
| `witness.pdb.create` | Specifies whether to create a Pod disruption budget for PostgreSQL witness with Repmgr | `false` |
| `witness.pdb.minAvailable` | Minimum number / percentage of pods that should remain scheduled | `1` |
| `witness.pdb.maxUnavailable` | Maximum number / percentage of pods that may be made unavailable | `""` |
| `witness.upgradeRepmgrExtension` | Upgrade repmgr extension in the database | `false` |
| `witness.pgHbaTrustAll` | Configures PostgreSQL HBA to trust every user | `false` |
| `witness.repmgrLogLevel` | Repmgr log level (DEBUG, INFO, NOTICE, WARNING, ERROR, ALERT, CRIT or EMERG) | `NOTICE` |
| `witness.repmgrConnectTimeout` | Repmgr backend connection timeout (in seconds) | `5` |
| `witness.repmgrReconnectAttempts` | Repmgr backend reconnection attempts | `2` |
| `witness.repmgrReconnectInterval` | Repmgr backend reconnection interval (in seconds) | `3` |
| `witness.audit.logHostname` | Add client hostnames to the log file | `true` |
| `witness.audit.logConnections` | Add client log-in operations to the log file | `false` |
| `witness.audit.logDisconnections` | Add client log-outs operations to the log file | `false` |
| `witness.audit.pgAuditLog` | Add operations to log using the pgAudit extension | `""` |
| `witness.audit.pgAuditLogCatalog` | Log catalog using pgAudit | `off` |
| `witness.audit.clientMinMessages` | Message log level to share with the user | `error` |
| `witness.audit.logLinePrefix` | Template string for the log line prefix | `""` |
| `witness.audit.logTimezone` | Timezone for the log timestamps | `""` |
| `witness.maxConnections` | Maximum total connections | `""` |
| `witness.postgresConnectionLimit` | Maximum connections for the postgres user | `""` |
| `witness.dbUserConnectionLimit` | Maximum connections for the created user | `""` |
| `witness.tcpKeepalivesInterval` | TCP keepalives interval | `""` |
| `witness.tcpKeepalivesIdle` | TCP keepalives idle | `""` |
| `witness.tcpKeepalivesCount` | TCP keepalives count | `""` |
| `witness.statementTimeout` | Statement timeout | `""` |
| `witness.pghbaRemoveFilters` | Comma-separated list of patterns to remove from the pg_hba.conf file | `""` |
| `witness.extraInitContainers` | Extra init containers | `[]` |
| `witness.repmgrConfiguration` | Repmgr configuration | `""` |
| `witness.configuration` | PostgreSQL configuration | `""` |
| `witness.pgHbaConfiguration` | PostgreSQL client authentication configuration | `""` |
| `witness.configurationCM` | Name of existing ConfigMap with configuration files | `""` |
| `witness.extendedConf` | Extended PostgreSQL configuration (appended to main or default configuration). Implies `volumePermissions.enabled`. | `""` |
| `witness.extendedConfCM` | ConfigMap with PostgreSQL extended configuration | `""` |
| `witness.initdbScripts` | Dictionary of initdb scripts | `{}` |
| `witness.initdbScriptsCM` | ConfigMap with scripts to be run at first boot | `""` |
| `witness.initdbScriptsSecret` | Secret with scripts to be run at first boot | `""` |
| Name | Description | Value |
| -------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ----------------------------------- |
| `postgresql.image.registry` | PostgreSQL with Repmgr image registry | `REGISTRY_NAME` |
| `postgresql.image.repository` | PostgreSQL with Repmgr image repository | `REPOSITORY_NAME/postgresql-repmgr` |
| `postgresql.image.digest` | PostgreSQL image digest in the way sha256:aa.... Please note this parameter, if set, will override the tag | `""` |
| `postgresql.image.pullPolicy` | PostgreSQL with Repmgr image pull policy | `IfNotPresent` |
| `postgresql.image.pullSecrets` | Specify docker-registry secret names as an array | `[]` |
| `postgresql.image.debug` | Specify if debug logs should be enabled | `false` |
| `postgresql.labels` | Labels to add to the StatefulSet. Evaluated as template | `{}` |
| `postgresql.podLabels` | Labels to add to the StatefulSet pods. Evaluated as template | `{}` |
| `postgresql.serviceAnnotations` | Provide any additional annotations for PostgreSQL service | `{}` |
| `postgresql.replicaCount` | Number of replicas to deploy. Use an odd number. Having 3 replicas is the minimum to get quorum when promoting a new primary. | `3` |
| `postgresql.updateStrategy.type` | Postgresql statefulset strategy type | `RollingUpdate` |
| `postgresql.containerPorts.postgresql` | PostgreSQL port | `5432` |
| `postgresql.automountServiceAccountToken` | Mount Service Account token in pod | `false` |
| `postgresql.hostAliases` | Deployment pod host aliases | `[]` |
| `postgresql.hostNetwork` | Specify if host network should be enabled for PostgreSQL pod | `false` |
| `postgresql.hostIPC` | Specify if host IPC should be enabled for PostgreSQL pod | `false` |
| `postgresql.podAnnotations` | Additional pod annotations | `{}` |
| `postgresql.podAffinityPreset` | PostgreSQL pod affinity preset. Ignored if `postgresql.affinity` is set. Allowed values: `soft` or `hard` | `""` |
| `postgresql.podAntiAffinityPreset` | PostgreSQL pod anti-affinity preset. Ignored if `postgresql.affinity` is set. Allowed values: `soft` or `hard` | `soft` |
| `postgresql.nodeAffinityPreset.type` | PostgreSQL node affinity preset type. Ignored if `postgresql.affinity` is set. Allowed values: `soft` or `hard` | `""` |
| `postgresql.nodeAffinityPreset.key` | PostgreSQL node label key to match Ignored if `postgresql.affinity` is set. | `""` |
| `postgresql.nodeAffinityPreset.values` | PostgreSQL node label values to match. Ignored if `postgresql.affinity` is set. | `[]` |
| `postgresql.affinity` | Affinity for PostgreSQL pods assignment | `{}` |
| `postgresql.nodeSelector` | Node labels for PostgreSQL pods assignment | `{}` |
| `postgresql.tolerations` | Tolerations for PostgreSQL pods assignment | `[]` |
| `postgresql.topologySpreadConstraints` | Topology Spread Constraints for pod assignment spread across your cluster among failure-domains. Evaluated as a template | `[]` |
| `postgresql.priorityClassName` | Pod priority class | `""` |
| `postgresql.schedulerName` | Use an alternate scheduler, e.g. "stork". | `""` |
| `postgresql.terminationGracePeriodSeconds` | Seconds PostgreSQL pod needs to terminate gracefully | `""` |
| `postgresql.podSecurityContext.enabled` | Enable security context for PostgreSQL with Repmgr | `true` |
| `postgresql.podSecurityContext.fsGroupChangePolicy` | Set filesystem group change policy | `Always` |
| `postgresql.podSecurityContext.sysctls` | Set kernel settings using the sysctl interface | `[]` |
| `postgresql.podSecurityContext.supplementalGroups` | Set filesystem extra groups | `[]` |
| `postgresql.podSecurityContext.fsGroup` | Group ID for the PostgreSQL with Repmgr filesystem | `1001` |
| `postgresql.containerSecurityContext.enabled` | Enabled containers' Security Context | `true` |
| `postgresql.containerSecurityContext.seLinuxOptions` | Set SELinux options in container | `nil` |
| `postgresql.containerSecurityContext.runAsUser` | Set containers' Security Context runAsUser | `1001` |
| `postgresql.containerSecurityContext.runAsGroup` | Set containers' Security Context runAsGroup | `1001` |
| `postgresql.containerSecurityContext.runAsNonRoot` | Set container's Security Context runAsNonRoot | `true` |
| `postgresql.containerSecurityContext.privileged` | Set container's Security Context privileged | `false` |
| `postgresql.containerSecurityContext.readOnlyRootFilesystem` | Set container's Security Context readOnlyRootFilesystem | `true` |
| `postgresql.containerSecurityContext.allowPrivilegeEscalation` | Set container's Security Context allowPrivilegeEscalation | `false` |
| `postgresql.containerSecurityContext.capabilities.drop` | List of capabilities to be dropped | `["ALL"]` |
| `postgresql.containerSecurityContext.seccompProfile.type` | Set container's Security Context seccomp profile | `RuntimeDefault` |
| `postgresql.command` | Override default container command (useful when using custom images) | `[]` |
| `postgresql.args` | Override default container args (useful when using custom images) | `[]` |
| `postgresql.lifecycleHooks` | LifecycleHook to set additional configuration at startup, e.g. LDAP settings via REST API. Evaluated as a template | `{}` |
| `postgresql.extraEnvVars` | Array containing extra environment variables | `[]` |
| `postgresql.extraEnvVarsCM` | ConfigMap with extra environment variables | `""` |
| `postgresql.extraEnvVarsSecret` | Secret with extra environment variables | `""` |
| `postgresql.extraVolumes` | Extra volumes to add to the deployment | `[]` |
| `postgresql.extraVolumeMounts` | Extra volume mounts to add to the container. Normally used with `extraVolumes`. | `[]` |
| `postgresql.initContainers` | Extra init containers to add to the deployment | `[]` |
| `postgresql.sidecars` | Extra sidecar containers to add to the deployment | `[]` |
| `postgresql.resourcesPreset` | Set container resources according to one common preset (allowed values: none, nano, micro, small, medium, large, xlarge, 2xlarge). This is ignored if postgresql.resources is set (postgresql.resources is recommended for production). | `micro` |
| `postgresql.resources` | Set container requests and limits for different resources like CPU or memory (essential for production workloads) | `{}` |
| `postgresql.podManagementPolicy` | sets the pod management policy | `Parallel` |
| `postgresql.livenessProbe.enabled` | Enable livenessProbe | `true` |
| `postgresql.livenessProbe.initialDelaySeconds` | Initial delay seconds for livenessProbe | `30` |
| `postgresql.livenessProbe.periodSeconds` | Period seconds for livenessProbe | `10` |
| `postgresql.livenessProbe.timeoutSeconds` | Timeout seconds for livenessProbe | `5` |
| `postgresql.livenessProbe.failureThreshold` | Failure threshold for livenessProbe | `6` |
| `postgresql.livenessProbe.successThreshold` | Success threshold for livenessProbe | `1` |
| `postgresql.readinessProbe.enabled` | Enable readinessProbe | `true` |
| `postgresql.readinessProbe.initialDelaySeconds` | Initial delay seconds for readinessProbe | `5` |
| `postgresql.readinessProbe.periodSeconds` | Period seconds for readinessProbe | `10` |
| `postgresql.readinessProbe.timeoutSeconds` | Timeout seconds for readinessProbe | `5` |
| `postgresql.readinessProbe.failureThreshold` | Failure threshold for readinessProbe | `6` |
| `postgresql.readinessProbe.successThreshold` | Success threshold for readinessProbe | `1` |
| `postgresql.startupProbe.enabled` | Enable startupProbe | `false` |
| `postgresql.startupProbe.initialDelaySeconds` | Initial delay seconds for startupProbe | `5` |
| `postgresql.startupProbe.periodSeconds` | Period seconds for startupProbe | `10` |
| `postgresql.startupProbe.timeoutSeconds` | Timeout seconds for startupProbe | `5` |
| `postgresql.startupProbe.failureThreshold` | Failure threshold for startupProbe | `10` |
| `postgresql.startupProbe.successThreshold` | Success threshold for startupProbe | `1` |
| `postgresql.customLivenessProbe` | Override default liveness probe | `{}` |
| `postgresql.customReadinessProbe` | Override default readiness probe | `{}` |
| `postgresql.customStartupProbe` | Override default startup probe | `{}` |
| `postgresql.networkPolicy.enabled` | Specifies whether a NetworkPolicy should be created | `true` |
| `postgresql.networkPolicy.allowExternal` | Don't require server label for connections | `true` |
| `postgresql.networkPolicy.allowExternalEgress` | Allow the pod to access any range of port and all destinations. | `true` |
| `postgresql.networkPolicy.extraIngress` | Add extra ingress rules to the NetworkPolice | `[]` |
| `postgresql.networkPolicy.extraEgress` | Add extra ingress rules to the NetworkPolicy | `[]` |
| `postgresql.networkPolicy.ingressNSMatchLabels` | Labels to match to allow traffic from other namespaces | `{}` |
| `postgresql.networkPolicy.ingressNSPodMatchLabels` | Pod labels to match to allow traffic from other namespaces | `{}` |
| `postgresql.pdb.create` | Specifies whether to create a Pod disruption budget for PostgreSQL with Repmgr | `false` |
| `postgresql.pdb.minAvailable` | Minimum number / percentage of pods that should remain scheduled | `1` |
| `postgresql.pdb.maxUnavailable` | Maximum number / percentage of pods that may be made unavailable | `""` |
| `postgresql.username` | PostgreSQL username | `postgres` |
| `postgresql.password` | PostgreSQL password | `""` |
| `postgresql.database` | PostgreSQL database | `""` |
| `postgresql.existingSecret` | PostgreSQL password using existing secret | `""` |
| `postgresql.postgresPassword` | PostgreSQL password for the `postgres` user when `username` is not `postgres` | `""` |
| `postgresql.usePasswordFile` | Set to `true` to mount PostgreSQL secret as a file instead of passing environment variable | `""` |
| `postgresql.repmgrUsePassfile` | Set to `true` to configure repmgrl to use `passfile` instead of `password` vars*:*:*:username:password" and use it to configure Repmgr instead of using password (Requires Postgresql 10+, otherwise ignored) | `""` |
| `postgresql.repmgrPassfilePath` | Custom path where `passfile` will be stored | `""` |
| `postgresql.upgradeRepmgrExtension` | Upgrade repmgr extension in the database | `false` |
| `postgresql.pgHbaTrustAll` | Configures PostgreSQL HBA to trust every user | `false` |
| `postgresql.syncReplication` | Make the replication synchronous. This will wait until the data is synchronized in all the replicas before other query can be run. This ensures the data availability at the expenses of speed. | `false` |
| `postgresql.syncReplicationMode` | This specifies the method to choose synchronous standbys from the listed servers. Valid values: empty, FIRST, ANY. | `""` |
| `postgresql.repmgrUsername` | PostgreSQL Repmgr username | `repmgr` |
| `postgresql.repmgrPassword` | PostgreSQL Repmgr password | `""` |
| `postgresql.repmgrDatabase` | PostgreSQL Repmgr database | `repmgr` |
| `postgresql.repmgrLogLevel` | Repmgr log level (DEBUG, INFO, NOTICE, WARNING, ERROR, ALERT, CRIT or EMERG) | `NOTICE` |
| `postgresql.repmgrConnectTimeout` | Repmgr backend connection timeout (in seconds) | `5` |
| `postgresql.repmgrReconnectAttempts` | Repmgr backend reconnection attempts | `2` |
| `postgresql.repmgrReconnectInterval` | Repmgr backend reconnection interval (in seconds) | `3` |
| `postgresql.repmgrFenceOldPrimary` | Set if fencing of old primary in multiple primary situation is desired | `false` |
| `postgresql.repmgrChildNodesCheckInterval` | Repmgr child nodes check interval (in seconds) | `5` |
| `postgresql.repmgrChildNodesConnectedMinCount` | Repmgr minimum number of connected child nodes before being considered as failed primary for fencing | `1` |
| `postgresql.repmgrChildNodesDisconnectTimeout` | Repmgr time before node will be fenced when insufficient child nodes are detected (in seconds) | `30` |
| `postgresql.usePgRewind` | Use pg_rewind for standby failover (experimental) | `false` |
| `postgresql.audit.logHostname` | Add client hostnames to the log file | `true` |
| `postgresql.audit.logConnections` | Add client log-in operations to the log file | `false` |
| `postgresql.audit.logDisconnections` | Add client log-outs operations to the log file | `false` |
| `postgresql.audit.pgAuditLog` | Add operations to log using the pgAudit extension | `""` |
| `postgresql.audit.pgAuditLogCatalog` | Log catalog using pgAudit | `off` |
| `postgresql.audit.clientMinMessages` | Message log level to share with the user | `error` |
| `postgresql.audit.logLinePrefix` | Template string for the log line prefix | `""` |
| `postgresql.audit.logTimezone` | Timezone for the log timestamps | `""` |
| `postgresql.sharedPreloadLibraries` | Shared preload libraries (comma-separated list) | `pgaudit, repmgr` |
| `postgresql.maxConnections` | Maximum total connections | `""` |
| `postgresql.postgresConnectionLimit` | Maximum connections for the postgres user | `""` |
| `postgresql.dbUserConnectionLimit` | Maximum connections for the created user | `""` |
| `postgresql.tcpKeepalivesInterval` | TCP keepalives interval | `""` |
| `postgresql.tcpKeepalivesIdle` | TCP keepalives idle | `""` |
| `postgresql.tcpKeepalivesCount` | TCP keepalives count | `""` |
| `postgresql.statementTimeout` | Statement timeout | `""` |
| `postgresql.pghbaRemoveFilters` | Comma-separated list of patterns to remove from the pg_hba.conf file | `""` |
| `postgresql.extraInitContainers` | Extra init containers | `[]` |
| `postgresql.repmgrConfiguration` | Repmgr configuration | `""` |
| `postgresql.configuration` | PostgreSQL configuration | `""` |
| `postgresql.pgHbaConfiguration` | PostgreSQL client authentication configuration | `""` |
| `postgresql.configurationCM` | Name of existing ConfigMap with configuration files | `""` |
| `postgresql.extendedConf` | Extended PostgreSQL configuration (appended to main or default configuration). Implies `volumePermissions.enabled`. | `""` |
| `postgresql.extendedConfCM` | ConfigMap with PostgreSQL extended configuration | `""` |
| `postgresql.initdbScripts` | Dictionary of initdb scripts | `{}` |
| `postgresql.initdbScriptsCM` | ConfigMap with scripts to be run at first boot | `""` |
| `postgresql.initdbScriptsSecret` | Secret with scripts to be run at first boot | `""` |
| `postgresql.tls.enabled` | Enable TLS traffic support for end-client connections | `false` |
| `postgresql.tls.preferServerCiphers` | Whether to use the server's TLS cipher preferences rather than the client's | `true` |
| `postgresql.tls.certificatesSecret` | Name of an existing secret that contains the certificates | `""` |
| `postgresql.tls.certFilename` | Certificate filename | `""` |
| `postgresql.tls.certKeyFilename` | Certificate key filename | `""` |
| `postgresql.preStopDelayAfterPgStopSeconds` | Minimal number of seconds preStop hook waits after postgres instance is stopped | `25` |
| `postgresql.headlessWithNotReadyAddresses` | set postgres headless service into publishNotReadyAddresses mode | `false` |
| `witness.create` | Create PostgreSQL witness nodes | `false` |
| `witness.labels` | Labels to add to the StatefulSet. Evaluated as template | `{}` |
| `witness.podLabels` | Labels to add to the StatefulSet pods. Evaluated as template | `{}` |
| `witness.replicaCount` | Number of replicas to deploy. | `1` |
| `witness.updateStrategy.type` | Postgresql statefulset strategy type | `RollingUpdate` |
| `witness.containerPorts.postgresql` | PostgreSQL witness port | `5432` |
| `witness.automountServiceAccountToken` | Mount Service Account token in pod | `false` |
| `witness.hostAliases` | Deployment pod host aliases | `[]` |
| `witness.hostNetwork` | Specify if host network should be enabled for PostgreSQL witness pod | `false` |
| `witness.hostIPC` | Specify if host IPC should be enabled for PostgreSQL witness pod | `false` |
| `witness.podAnnotations` | Additional pod annotations | `{}` |
| `witness.podAffinityPreset` | PostgreSQL witness pod affinity preset. Ignored if `witness.affinity` is set. Allowed values: `soft` or `hard` | `""` |
| `witness.podAntiAffinityPreset` | PostgreSQL witness pod anti-affinity preset. Ignored if `witness.affinity` is set. Allowed values: `soft` or `hard` | `soft` |
| `witness.nodeAffinityPreset.type` | PostgreSQL witness node affinity preset type. Ignored if `witness.affinity` is set. Allowed values: `soft` or `hard` | `""` |
| `witness.nodeAffinityPreset.key` | PostgreSQL witness node label key to match Ignored if `witness.affinity` is set. | `""` |
| `witness.nodeAffinityPreset.values` | PostgreSQL witness node label values to match. Ignored if `witness.affinity` is set. | `[]` |
| `witness.affinity` | Affinity for PostgreSQL witness pods assignment | `{}` |
| `witness.nodeSelector` | Node labels for PostgreSQL witness pods assignment | `{}` |
| `witness.tolerations` | Tolerations for PostgreSQL witness pods assignment | `[]` |
| `witness.topologySpreadConstraints` | Topology Spread Constraints for pod assignment spread across your cluster among failure-domains. Evaluated as a template | `[]` |
| `witness.priorityClassName` | Pod priority class | `""` |
| `witness.schedulerName` | Use an alternate scheduler, e.g. "stork". | `""` |
| `witness.terminationGracePeriodSeconds` | Seconds PostgreSQL witness pod needs to terminate gracefully | `""` |
| `witness.podSecurityContext.enabled` | Enable security context for PostgreSQL witness with Repmgr | `true` |
| `witness.podSecurityContext.fsGroupChangePolicy` | Set filesystem group change policy | `Always` |
| `witness.podSecurityContext.sysctls` | Set kernel settings using the sysctl interface | `[]` |
| `witness.podSecurityContext.supplementalGroups` | Set filesystem extra groups | `[]` |
| `witness.podSecurityContext.fsGroup` | Group ID for the PostgreSQL witness with Repmgr filesystem | `1001` |
| `witness.containerSecurityContext.enabled` | Enabled containers' Security Context | `true` |
| `witness.containerSecurityContext.seLinuxOptions` | Set SELinux options in container | `nil` |
| `witness.containerSecurityContext.runAsUser` | Set containers' Security Context runAsUser | `1001` |
| `witness.containerSecurityContext.runAsGroup` | Set containers' Security Context runAsGroup | `1001` |
| `witness.containerSecurityContext.runAsNonRoot` | Set container's Security Context runAsNonRoot | `true` |
| `witness.containerSecurityContext.privileged` | Set container's Security Context privileged | `false` |
| `witness.containerSecurityContext.readOnlyRootFilesystem` | Set container's Security Context readOnlyRootFilesystem | `true` |
| `witness.containerSecurityContext.allowPrivilegeEscalation` | Set container's Security Context allowPrivilegeEscalation | `false` |
| `witness.containerSecurityContext.capabilities.drop` | List of capabilities to be dropped | `["ALL"]` |
| `witness.containerSecurityContext.seccompProfile.type` | Set container's Security Context seccomp profile | `RuntimeDefault` |
| `witness.command` | Override default container command (useful when using custom images) | `[]` |
| `witness.args` | Override default container args (useful when using custom images) | `[]` |
| `witness.lifecycleHooks` | LifecycleHook to set additional configuration at startup, e.g. LDAP settings via REST API. Evaluated as a template | `{}` |
| `witness.extraEnvVars` | Array containing extra environment variables | `[]` |
| `witness.extraEnvVarsCM` | ConfigMap with extra environment variables | `""` |
| `witness.extraEnvVarsSecret` | Secret with extra environment variables | `""` |
| `witness.extraVolumes` | Extra volumes to add to the deployment | `[]` |
| `witness.extraVolumeMounts` | Extra volume mounts to add to the container. Normally used with `extraVolumes`. | `[]` |
| `witness.initContainers` | Extra init containers to add to the deployment | `[]` |
| `witness.sidecars` | Extra sidecar containers to add to the deployment | `[]` |
| `witness.resourcesPreset` | Set container resources according to one common preset (allowed values: none, nano, micro, small, medium, large, xlarge, 2xlarge). This is ignored if witness.resources is set (witness.resources is recommended for production). | `micro` |
| `witness.resources` | Set container requests and limits for different resources like CPU or memory (essential for production workloads) | `{}` |
| `witness.livenessProbe.enabled` | Enable livenessProbe | `true` |
| `witness.livenessProbe.initialDelaySeconds` | Initial delay seconds for livenessProbe | `30` |
| `witness.livenessProbe.periodSeconds` | Period seconds for livenessProbe | `10` |
| `witness.livenessProbe.timeoutSeconds` | Timeout seconds for livenessProbe | `5` |
| `witness.livenessProbe.failureThreshold` | Failure threshold for livenessProbe | `6` |
| `witness.livenessProbe.successThreshold` | Success threshold for livenessProbe | `1` |
| `witness.readinessProbe.enabled` | Enable readinessProbe | `true` |
| `witness.readinessProbe.initialDelaySeconds` | Initial delay seconds for readinessProbe | `5` |
| `witness.readinessProbe.periodSeconds` | Period seconds for readinessProbe | `10` |
| `witness.readinessProbe.timeoutSeconds` | Timeout seconds for readinessProbe | `5` |
| `witness.readinessProbe.failureThreshold` | Failure threshold for readinessProbe | `6` |
| `witness.readinessProbe.successThreshold` | Success threshold for readinessProbe | `1` |
| `witness.startupProbe.enabled` | Enable startupProbe | `false` |
| `witness.startupProbe.initialDelaySeconds` | Initial delay seconds for startupProbe | `5` |
| `witness.startupProbe.periodSeconds` | Period seconds for startupProbe | `10` |
| `witness.startupProbe.timeoutSeconds` | Timeout seconds for startupProbe | `5` |
| `witness.startupProbe.failureThreshold` | Failure threshold for startupProbe | `10` |
| `witness.startupProbe.successThreshold` | Success threshold for startupProbe | `1` |
| `witness.customLivenessProbe` | Override default liveness probe | `{}` |
| `witness.customReadinessProbe` | Override default readiness probe | `{}` |
| `witness.customStartupProbe` | Override default startup probe | `{}` |
| `witness.pdb.create` | Specifies whether to create a Pod disruption budget for PostgreSQL witness with Repmgr | `false` |
| `witness.pdb.minAvailable` | Minimum number / percentage of pods that should remain scheduled | `1` |
| `witness.pdb.maxUnavailable` | Maximum number / percentage of pods that may be made unavailable | `""` |
| `witness.upgradeRepmgrExtension` | Upgrade repmgr extension in the database | `false` |
| `witness.pgHbaTrustAll` | Configures PostgreSQL HBA to trust every user | `false` |
| `witness.repmgrLogLevel` | Repmgr log level (DEBUG, INFO, NOTICE, WARNING, ERROR, ALERT, CRIT or EMERG) | `NOTICE` |
| `witness.repmgrConnectTimeout` | Repmgr backend connection timeout (in seconds) | `5` |
| `witness.repmgrReconnectAttempts` | Repmgr backend reconnection attempts | `2` |
| `witness.repmgrReconnectInterval` | Repmgr backend reconnection interval (in seconds) | `3` |
| `witness.audit.logHostname` | Add client hostnames to the log file | `true` |
| `witness.audit.logConnections` | Add client log-in operations to the log file | `false` |
| `witness.audit.logDisconnections` | Add client log-outs operations to the log file | `false` |
| `witness.audit.pgAuditLog` | Add operations to log using the pgAudit extension | `""` |
| `witness.audit.pgAuditLogCatalog` | Log catalog using pgAudit | `off` |
| `witness.audit.clientMinMessages` | Message log level to share with the user | `error` |
| `witness.audit.logLinePrefix` | Template string for the log line prefix | `""` |
| `witness.audit.logTimezone` | Timezone for the log timestamps | `""` |
| `witness.maxConnections` | Maximum total connections | `""` |
| `witness.postgresConnectionLimit` | Maximum connections for the postgres user | `""` |
| `witness.dbUserConnectionLimit` | Maximum connections for the created user | `""` |
| `witness.tcpKeepalivesInterval` | TCP keepalives interval | `""` |
| `witness.tcpKeepalivesIdle` | TCP keepalives idle | `""` |
| `witness.tcpKeepalivesCount` | TCP keepalives count | `""` |
| `witness.statementTimeout` | Statement timeout | `""` |
| `witness.pghbaRemoveFilters` | Comma-separated list of patterns to remove from the pg_hba.conf file | `""` |
| `witness.extraInitContainers` | Extra init containers | `[]` |
| `witness.repmgrConfiguration` | Repmgr configuration | `""` |
| `witness.configuration` | PostgreSQL configuration | `""` |
| `witness.pgHbaConfiguration` | PostgreSQL client authentication configuration | `""` |
| `witness.configurationCM` | Name of existing ConfigMap with configuration files | `""` |
| `witness.extendedConf` | Extended PostgreSQL configuration (appended to main or default configuration). Implies `volumePermissions.enabled`. | `""` |
| `witness.extendedConfCM` | ConfigMap with PostgreSQL extended configuration | `""` |
| `witness.initdbScripts` | Dictionary of initdb scripts | `{}` |
| `witness.initdbScriptsCM` | ConfigMap with scripts to be run at first boot | `""` |
| `witness.initdbScriptsSecret` | Secret with scripts to be run at first boot | `""` |
### Pgpool parameters
| Name | Description | Value |
| ---------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | ------------------------ |
| `pgpool.image.registry` | Pgpool image registry | `REGISTRY_NAME` |
| `pgpool.image.repository` | Pgpool image repository | `REPOSITORY_NAME/pgpool` |
| `pgpool.image.digest` | Pgpool image digest in the way sha256:aa.... Please note this parameter, if set, will override the tag | `""` |
| `pgpool.image.pullPolicy` | Pgpool image pull policy | `IfNotPresent` |
| `pgpool.image.pullSecrets` | Specify docker-registry secret names as an array | `[]` |
| `pgpool.image.debug` | Specify if debug logs should be enabled | `false` |
| `pgpool.customUsers.usernames` | Comma or semicolon separated list of additional users that will be performing connections to the database using pgpool. | `""` |
| `pgpool.customUsers.passwords` | Comma or semicolon separated list of the associated passwords for the users above. Must have the same number of elements as the usernames list. | `""` |
| `pgpool.automountServiceAccountToken` | Mount Service Account token in pod | `false` |
| `pgpool.hostAliases` | Deployment pod host aliases | `[]` |
| `pgpool.customUsersSecret` | Name of a secret containing the usernames and passwords of accounts that will be added to pgpool_passwd | `""` |
| `pgpool.existingSecret` | Pgpool admin password using existing secret | `""` |
| `pgpool.srCheckDatabase` | Name of the database to perform streaming replication checks | `postgres` |
| `pgpool.labels` | Labels to add to the Deployment. Evaluated as template | `{}` |
| `pgpool.podLabels` | Labels to add to the pods. Evaluated as template | `{}` |
| `pgpool.serviceLabels` | Labels to add to the service. Evaluated as template | `{}` |
| `pgpool.serviceAnnotations` | Provide any additional annotations for Pgpool service | `{}` |
| `pgpool.customLivenessProbe` | Override default liveness probe | `{}` |
| `pgpool.customReadinessProbe` | Override default readiness probe | `{}` |
| `pgpool.customStartupProbe` | Override default startup probe | `{}` |
| `pgpool.command` | Override default container command (useful when using custom images) | `[]` |
| `pgpool.args` | Override default container args (useful when using custom images) | `[]` |
| `pgpool.lifecycleHooks` | LifecycleHook to set additional configuration at startup, e.g. LDAP settings via REST API. Evaluated as a template | `{}` |
| `pgpool.extraEnvVars` | Array containing extra environment variables | `[]` |
| `pgpool.extraEnvVarsCM` | ConfigMap with extra environment variables | `""` |
| `pgpool.extraEnvVarsSecret` | Secret with extra environment variables | `""` |
| `pgpool.extraVolumes` | Extra volumes to add to the deployment | `[]` |
| `pgpool.extraVolumeMounts` | Extra volume mounts to add to the container. Normally used with `extraVolumes` | `[]` |
| `pgpool.initContainers` | Extra init containers to add to the deployment | `[]` |
| `pgpool.sidecars` | Extra sidecar containers to add to the deployment | `[]` |
| `pgpool.replicaCount` | The number of replicas to deploy | `1` |
| `pgpool.podAnnotations` | Additional pod annotations | `{}` |
| `pgpool.priorityClassName` | Pod priority class | `""` |
| `pgpool.schedulerName` | Use an alternate scheduler, e.g. "stork". | `""` |
| `pgpool.terminationGracePeriodSeconds` | Seconds pgpool pod needs to terminate gracefully | `""` |
| `pgpool.topologySpreadConstraints` | Topology Spread Constraints for pod assignment spread across your cluster among failure-domains. Evaluated as a template | `[]` |
| `pgpool.podAffinityPreset` | Pgpool pod affinity preset. Ignored if `pgpool.affinity` is set. Allowed values: `soft` or `hard` | `""` |
| `pgpool.podAntiAffinityPreset` | Pgpool pod anti-affinity preset. Ignored if `pgpool.affinity` is set. Allowed values: `soft` or `hard` | `soft` |
| `pgpool.nodeAffinityPreset.type` | Pgpool node affinity preset type. Ignored if `pgpool.affinity` is set. Allowed values: `soft` or `hard` | `""` |
| `pgpool.nodeAffinityPreset.key` | Pgpool node label key to match Ignored if `pgpool.affinity` is set. | `""` |
| `pgpool.nodeAffinityPreset.values` | Pgpool node label values to match. Ignored if `pgpool.affinity` is set. | `[]` |
| `pgpool.affinity` | Affinity for Pgpool pods assignment | `{}` |
| `pgpool.nodeSelector` | Node labels for Pgpool pods assignment | `{}` |
| `pgpool.tolerations` | Tolerations for Pgpool pods assignment | `[]` |
| `pgpool.podSecurityContext.enabled` | Enable security context for Pgpool | `true` |
| `pgpool.podSecurityContext.fsGroupChangePolicy` | Set filesystem group change policy | `Always` |
| `pgpool.podSecurityContext.sysctls` | Set kernel settings using the sysctl interface | `[]` |
| `pgpool.podSecurityContext.supplementalGroups` | Set filesystem extra groups | `[]` |
| `pgpool.podSecurityContext.fsGroup` | Group ID for the Pgpool filesystem | `1001` |
| `pgpool.containerSecurityContext.enabled` | Enabled containers' Security Context | `true` |
| `pgpool.containerSecurityContext.seLinuxOptions` | Set SELinux options in container | `nil` |
| `pgpool.containerSecurityContext.runAsUser` | Set containers' Security Context runAsUser | `1001` |
| `pgpool.containerSecurityContext.runAsGroup` | Set containers' Security Context runAsGroup | `1001` |
| `pgpool.containerSecurityContext.runAsNonRoot` | Set container's Security Context runAsNonRoot | `true` |
| `pgpool.containerSecurityContext.privileged` | Set container's Security Context privileged | `false` |
| `pgpool.containerSecurityContext.readOnlyRootFilesystem` | Set container's Security Context readOnlyRootFilesystem | `true` |
| `pgpool.containerSecurityContext.allowPrivilegeEscalation` | Set container's Security Context allowPrivilegeEscalation | `false` |
| `pgpool.containerSecurityContext.capabilities.drop` | List of capabilities to be dropped | `["ALL"]` |
| `pgpool.containerSecurityContext.seccompProfile.type` | Set container's Security Context seccomp profile | `RuntimeDefault` |
| `pgpool.resourcesPreset` | Set container resources according to one common preset (allowed values: none, nano, small, medium, large, xlarge, 2xlarge). This is ignored if pgpool.resources is set (pgpool.resources is recommended for production). | `micro` |
| `pgpool.resources` | Set container requests and limits for different resources like CPU or memory (essential for production workloads) | `{}` |
| `pgpool.livenessProbe.enabled` | Enable livenessProbe | `true` |
| `pgpool.livenessProbe.initialDelaySeconds` | Initial delay seconds for livenessProbe | `30` |
| `pgpool.livenessProbe.periodSeconds` | Period seconds for livenessProbe | `10` |
| `pgpool.livenessProbe.timeoutSeconds` | Timeout seconds for livenessProbe | `5` |
| `pgpool.livenessProbe.failureThreshold` | Failure threshold for livenessProbe | `5` |
| `pgpool.livenessProbe.successThreshold` | Success threshold for livenessProbe | `1` |
| `pgpool.readinessProbe.enabled` | Enable readinessProbe | `true` |
| `pgpool.readinessProbe.initialDelaySeconds` | Initial delay seconds for readinessProbe | `5` |
| `pgpool.readinessProbe.periodSeconds` | Period seconds for readinessProbe | `5` |
| `pgpool.readinessProbe.timeoutSeconds` | Timeout seconds for readinessProbe | `5` |
| `pgpool.readinessProbe.failureThreshold` | Failure threshold for readinessProbe | `5` |
| `pgpool.readinessProbe.successThreshold` | Success threshold for readinessProbe | `1` |
| `pgpool.startupProbe.enabled` | Enable startupProbe | `false` |
| `pgpool.startupProbe.initialDelaySeconds` | Initial delay seconds for startupProbe | `5` |
| `pgpool.startupProbe.periodSeconds` | Period seconds for startupProbe | `10` |
| `pgpool.startupProbe.timeoutSeconds` | Timeout seconds for startupProbe | `5` |
| `pgpool.startupProbe.failureThreshold` | Failure threshold for startupProbe | `10` |
| `pgpool.startupProbe.successThreshold` | Success threshold for startupProbe | `1` |
| `pgpool.networkPolicy.enabled` | Specifies whether a NetworkPolicy should be created | `true` |
| `pgpool.networkPolicy.allowExternal` | Don't require server label for connections | `true` |
| `pgpool.networkPolicy.allowExternalEgress` | Allow the pod to access any range of port and all destinations. | `true` |
| `pgpool.networkPolicy.extraIngress` | Add extra ingress rules to the NetworkPolice | `[]` |
| `pgpool.networkPolicy.extraEgress` | Add extra ingress rules to the NetworkPolicy | `[]` |
| `pgpool.networkPolicy.ingressNSMatchLabels` | Labels to match to allow traffic from other namespaces | `{}` |
| `pgpool.networkPolicy.ingressNSPodMatchLabels` | Pod labels to match to allow traffic from other namespaces | `{}` |
| `pgpool.pdb.create` | Specifies whether a Pod disruption budget should be created for Pgpool pods | `false` |
| `pgpool.pdb.minAvailable` | Minimum number / percentage of pods that should remain scheduled | `1` |
| `pgpool.pdb.maxUnavailable` | Maximum number / percentage of pods that may be made unavailable | `""` |
| `pgpool.updateStrategy` | Strategy used to replace old Pods by new ones | `{}` |
| `pgpool.containerPorts.postgresql` | Pgpool port | `5432` |
| `pgpool.minReadySeconds` | How many seconds a pod needs to be ready before killing the next, during update | `""` |
| `pgpool.adminUsername` | Pgpool Admin username | `admin` |
| `pgpool.adminPassword` | Pgpool Admin password | `""` |
| `pgpool.usePasswordFile` | Set to `true` to mount pgpool secret as a file instead of passing environment variable | `""` |
| `pgpool.authenticationMethod` | Pgpool authentication method. Use 'md5' for PSQL < 14. | `scram-sha-256` |
| `pgpool.logConnections` | Log all client connections (PGPOOL_ENABLE_LOG_CONNECTIONS) | `false` |
| `pgpool.logHostname` | Log the client hostname instead of IP address (PGPOOL_ENABLE_LOG_HOSTNAME) | `true` |
| `pgpool.logPerNodeStatement` | Log every SQL statement for each DB node separately (PGPOOL_ENABLE_LOG_PER_NODE_STATEMENT) | `false` |
| `pgpool.logLinePrefix` | Format of the log entry lines (PGPOOL_LOG_LINE_PREFIX) | `""` |
| `pgpool.clientMinMessages` | Log level for clients | `error` |
| `pgpool.numInitChildren` | The number of preforked Pgpool-II server processes. It is also the concurrent | `""` |
| `pgpool.reservedConnections` | Number of reserved connections. When zero, excess connection block. When non-zero, excess connections are refused with an error message. | `1` |
| `pgpool.maxPool` | The maximum number of cached connections in each child process (PGPOOL_MAX_POOL) | `""` |
| `pgpool.childMaxConnections` | The maximum number of client connections in each child process (PGPOOL_CHILD_MAX_CONNECTIONS) | `""` |
| `pgpool.childLifeTime` | The time in seconds to terminate a Pgpool-II child process if it remains idle (PGPOOL_CHILD_LIFE_TIME) | `""` |
| `pgpool.clientIdleLimit` | The time in seconds to disconnect a client if it remains idle since the last query (PGPOOL_CLIENT_IDLE_LIMIT) | `""` |
| `pgpool.connectionLifeTime` | The time in seconds to terminate the cached connections to the PostgreSQL backend (PGPOOL_CONNECTION_LIFE_TIME) | `""` |
| `pgpool.useLoadBalancing` | Use Pgpool Load-Balancing | `true` |
| `pgpool.disableLoadBalancingOnWrite` | LoadBalancer on write actions behavior | `transaction` |
| `pgpool.configuration` | Pgpool configuration | `""` |
| `pgpool.configurationCM` | ConfigMap with Pgpool configuration | `""` |
| `pgpool.initdbScripts` | Dictionary of initdb scripts | `{}` |
| `pgpool.initdbScriptsCM` | ConfigMap with scripts to be run every time Pgpool container is initialized | `""` |
| `pgpool.initdbScriptsSecret` | Secret with scripts to be run every time Pgpool container is initialized | `""` |
| `pgpool.tls.enabled` | Enable TLS traffic support for end-client connections | `false` |
| `pgpool.tls.autoGenerated` | Create self-signed TLS certificates. Currently only supports PEM certificates | `false` |
| `pgpool.tls.preferServerCiphers` | Whether to use the server's TLS cipher preferences rather than the client's | `true` |
| `pgpool.tls.certificatesSecret` | Name of an existing secret that contains the certificates | `""` |
| `pgpool.tls.certFilename` | Certificate filename | `""` |
| `pgpool.tls.certKeyFilename` | Certificate key filename | `""` |
| `pgpool.tls.certCAFilename` | CA Certificate filename | `""` |
| Name | Description | Value |
| ---------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------ |
| `pgpool.image.registry` | Pgpool image registry | `REGISTRY_NAME` |
| `pgpool.image.repository` | Pgpool image repository | `REPOSITORY_NAME/pgpool` |
| `pgpool.image.digest` | Pgpool image digest in the way sha256:aa.... Please note this parameter, if set, will override the tag | `""` |
| `pgpool.image.pullPolicy` | Pgpool image pull policy | `IfNotPresent` |
| `pgpool.image.pullSecrets` | Specify docker-registry secret names as an array | `[]` |
| `pgpool.image.debug` | Specify if debug logs should be enabled | `false` |
| `pgpool.customUsers.usernames` | Comma or semicolon separated list of additional users that will be performing connections to the database using pgpool. | `""` |
| `pgpool.customUsers.passwords` | Comma or semicolon separated list of the associated passwords for the users above. Must have the same number of elements as the usernames list. | `""` |
| `pgpool.automountServiceAccountToken` | Mount Service Account token in pod | `false` |
| `pgpool.hostAliases` | Deployment pod host aliases | `[]` |
| `pgpool.customUsersSecret` | Name of a secret containing the usernames and passwords of accounts that will be added to pgpool_passwd | `""` |
| `pgpool.existingSecret` | Pgpool admin password using existing secret | `""` |
| `pgpool.srCheckDatabase` | Name of the database to perform streaming replication checks | `postgres` |
| `pgpool.labels` | Labels to add to the Deployment. Evaluated as template | `{}` |
| `pgpool.podLabels` | Labels to add to the pods. Evaluated as template | `{}` |
| `pgpool.serviceLabels` | Labels to add to the service. Evaluated as template | `{}` |
| `pgpool.serviceAnnotations` | Provide any additional annotations for Pgpool service | `{}` |
| `pgpool.customLivenessProbe` | Override default liveness probe | `{}` |
| `pgpool.customReadinessProbe` | Override default readiness probe | `{}` |
| `pgpool.customStartupProbe` | Override default startup probe | `{}` |
| `pgpool.command` | Override default container command (useful when using custom images) | `[]` |
| `pgpool.args` | Override default container args (useful when using custom images) | `[]` |
| `pgpool.lifecycleHooks` | LifecycleHook to set additional configuration at startup, e.g. LDAP settings via REST API. Evaluated as a template | `{}` |
| `pgpool.extraEnvVars` | Array containing extra environment variables | `[]` |
| `pgpool.extraEnvVarsCM` | ConfigMap with extra environment variables | `""` |
| `pgpool.extraEnvVarsSecret` | Secret with extra environment variables | `""` |
| `pgpool.extraVolumes` | Extra volumes to add to the deployment | `[]` |
| `pgpool.extraVolumeMounts` | Extra volume mounts to add to the container. Normally used with `extraVolumes` | `[]` |
| `pgpool.initContainers` | Extra init containers to add to the deployment | `[]` |
| `pgpool.sidecars` | Extra sidecar containers to add to the deployment | `[]` |
| `pgpool.replicaCount` | The number of replicas to deploy | `1` |
| `pgpool.podAnnotations` | Additional pod annotations | `{}` |
| `pgpool.priorityClassName` | Pod priority class | `""` |
| `pgpool.schedulerName` | Use an alternate scheduler, e.g. "stork". | `""` |
| `pgpool.terminationGracePeriodSeconds` | Seconds pgpool pod needs to terminate gracefully | `""` |
| `pgpool.topologySpreadConstraints` | Topology Spread Constraints for pod assignment spread across your cluster among failure-domains. Evaluated as a template | `[]` |
| `pgpool.podAffinityPreset` | Pgpool pod affinity preset. Ignored if `pgpool.affinity` is set. Allowed values: `soft` or `hard` | `""` |
| `pgpool.podAntiAffinityPreset` | Pgpool pod anti-affinity preset. Ignored if `pgpool.affinity` is set. Allowed values: `soft` or `hard` | `soft` |
| `pgpool.nodeAffinityPreset.type` | Pgpool node affinity preset type. Ignored if `pgpool.affinity` is set. Allowed values: `soft` or `hard` | `""` |
| `pgpool.nodeAffinityPreset.key` | Pgpool node label key to match Ignored if `pgpool.affinity` is set. | `""` |
| `pgpool.nodeAffinityPreset.values` | Pgpool node label values to match. Ignored if `pgpool.affinity` is set. | `[]` |
| `pgpool.affinity` | Affinity for Pgpool pods assignment | `{}` |
| `pgpool.nodeSelector` | Node labels for Pgpool pods assignment | `{}` |
| `pgpool.tolerations` | Tolerations for Pgpool pods assignment | `[]` |
| `pgpool.podSecurityContext.enabled` | Enable security context for Pgpool | `true` |
| `pgpool.podSecurityContext.fsGroupChangePolicy` | Set filesystem group change policy | `Always` |
| `pgpool.podSecurityContext.sysctls` | Set kernel settings using the sysctl interface | `[]` |
| `pgpool.podSecurityContext.supplementalGroups` | Set filesystem extra groups | `[]` |
| `pgpool.podSecurityContext.fsGroup` | Group ID for the Pgpool filesystem | `1001` |
| `pgpool.containerSecurityContext.enabled` | Enabled containers' Security Context | `true` |
| `pgpool.containerSecurityContext.seLinuxOptions` | Set SELinux options in container | `nil` |
| `pgpool.containerSecurityContext.runAsUser` | Set containers' Security Context runAsUser | `1001` |
| `pgpool.containerSecurityContext.runAsGroup` | Set containers' Security Context runAsGroup | `1001` |
| `pgpool.containerSecurityContext.runAsNonRoot` | Set container's Security Context runAsNonRoot | `true` |
| `pgpool.containerSecurityContext.privileged` | Set container's Security Context privileged | `false` |
| `pgpool.containerSecurityContext.readOnlyRootFilesystem` | Set container's Security Context readOnlyRootFilesystem | `true` |
| `pgpool.containerSecurityContext.allowPrivilegeEscalation` | Set container's Security Context allowPrivilegeEscalation | `false` |
| `pgpool.containerSecurityContext.capabilities.drop` | List of capabilities to be dropped | `["ALL"]` |
| `pgpool.containerSecurityContext.seccompProfile.type` | Set container's Security Context seccomp profile | `RuntimeDefault` |
| `pgpool.resourcesPreset` | Set container resources according to one common preset (allowed values: none, nano, micro, small, medium, large, xlarge, 2xlarge). This is ignored if pgpool.resources is set (pgpool.resources is recommended for production). | `micro` |
| `pgpool.resources` | Set container requests and limits for different resources like CPU or memory (essential for production workloads) | `{}` |
| `pgpool.livenessProbe.enabled` | Enable livenessProbe | `true` |
| `pgpool.livenessProbe.initialDelaySeconds` | Initial delay seconds for livenessProbe | `30` |
| `pgpool.livenessProbe.periodSeconds` | Period seconds for livenessProbe | `10` |
| `pgpool.livenessProbe.timeoutSeconds` | Timeout seconds for livenessProbe | `5` |
| `pgpool.livenessProbe.failureThreshold` | Failure threshold for livenessProbe | `5` |
| `pgpool.livenessProbe.successThreshold` | Success threshold for livenessProbe | `1` |
| `pgpool.readinessProbe.enabled` | Enable readinessProbe | `true` |
| `pgpool.readinessProbe.initialDelaySeconds` | Initial delay seconds for readinessProbe | `5` |
| `pgpool.readinessProbe.periodSeconds` | Period seconds for readinessProbe | `5` |
| `pgpool.readinessProbe.timeoutSeconds` | Timeout seconds for readinessProbe | `5` |
| `pgpool.readinessProbe.failureThreshold` | Failure threshold for readinessProbe | `5` |
| `pgpool.readinessProbe.successThreshold` | Success threshold for readinessProbe | `1` |
| `pgpool.startupProbe.enabled` | Enable startupProbe | `false` |
| `pgpool.startupProbe.initialDelaySeconds` | Initial delay seconds for startupProbe | `5` |
| `pgpool.startupProbe.periodSeconds` | Period seconds for startupProbe | `10` |
| `pgpool.startupProbe.timeoutSeconds` | Timeout seconds for startupProbe | `5` |
| `pgpool.startupProbe.failureThreshold` | Failure threshold for startupProbe | `10` |
| `pgpool.startupProbe.successThreshold` | Success threshold for startupProbe | `1` |
| `pgpool.networkPolicy.enabled` | Specifies whether a NetworkPolicy should be created | `true` |
| `pgpool.networkPolicy.allowExternal` | Don't require server label for connections | `true` |
| `pgpool.networkPolicy.allowExternalEgress` | Allow the pod to access any range of port and all destinations. | `true` |
| `pgpool.networkPolicy.extraIngress` | Add extra ingress rules to the NetworkPolice | `[]` |
| `pgpool.networkPolicy.extraEgress` | Add extra ingress rules to the NetworkPolicy | `[]` |
| `pgpool.networkPolicy.ingressNSMatchLabels` | Labels to match to allow traffic from other namespaces | `{}` |
| `pgpool.networkPolicy.ingressNSPodMatchLabels` | Pod labels to match to allow traffic from other namespaces | `{}` |
| `pgpool.pdb.create` | Specifies whether a Pod disruption budget should be created for Pgpool pods | `false` |
| `pgpool.pdb.minAvailable` | Minimum number / percentage of pods that should remain scheduled | `1` |
| `pgpool.pdb.maxUnavailable` | Maximum number / percentage of pods that may be made unavailable | `""` |
| `pgpool.updateStrategy` | Strategy used to replace old Pods by new ones | `{}` |
| `pgpool.containerPorts.postgresql` | Pgpool port | `5432` |
| `pgpool.minReadySeconds` | How many seconds a pod needs to be ready before killing the next, during update | `""` |
| `pgpool.adminUsername` | Pgpool Admin username | `admin` |
| `pgpool.adminPassword` | Pgpool Admin password | `""` |
| `pgpool.usePasswordFile` | Set to `true` to mount pgpool secret as a file instead of passing environment variable | `""` |
| `pgpool.authenticationMethod` | Pgpool authentication method. Use 'md5' for PSQL < 14. | `scram-sha-256` |
| `pgpool.logConnections` | Log all client connections (PGPOOL_ENABLE_LOG_CONNECTIONS) | `false` |
| `pgpool.logHostname` | Log the client hostname instead of IP address (PGPOOL_ENABLE_LOG_HOSTNAME) | `true` |
| `pgpool.logPerNodeStatement` | Log every SQL statement for each DB node separately (PGPOOL_ENABLE_LOG_PER_NODE_STATEMENT) | `false` |
| `pgpool.logLinePrefix` | Format of the log entry lines (PGPOOL_LOG_LINE_PREFIX) | `""` |
| `pgpool.clientMinMessages` | Log level for clients | `error` |
| `pgpool.numInitChildren` | The number of preforked Pgpool-II server processes. It is also the concurrent | `""` |
| `pgpool.reservedConnections` | Number of reserved connections. When zero, excess connection block. When non-zero, excess connections are refused with an error message. | `1` |
| `pgpool.maxPool` | The maximum number of cached connections in each child process (PGPOOL_MAX_POOL) | `""` |
| `pgpool.childMaxConnections` | The maximum number of client connections in each child process (PGPOOL_CHILD_MAX_CONNECTIONS) | `""` |
| `pgpool.childLifeTime` | The time in seconds to terminate a Pgpool-II child process if it remains idle (PGPOOL_CHILD_LIFE_TIME) | `""` |
| `pgpool.clientIdleLimit` | The time in seconds to disconnect a client if it remains idle since the last query (PGPOOL_CLIENT_IDLE_LIMIT) | `""` |
| `pgpool.connectionLifeTime` | The time in seconds to terminate the cached connections to the PostgreSQL backend (PGPOOL_CONNECTION_LIFE_TIME) | `""` |
| `pgpool.useLoadBalancing` | Use Pgpool Load-Balancing | `true` |
| `pgpool.disableLoadBalancingOnWrite` | LoadBalancer on write actions behavior | `transaction` |
| `pgpool.configuration` | Pgpool configuration | `""` |
| `pgpool.configurationCM` | ConfigMap with Pgpool configuration | `""` |
| `pgpool.initdbScripts` | Dictionary of initdb scripts | `{}` |
| `pgpool.initdbScriptsCM` | ConfigMap with scripts to be run every time Pgpool container is initialized | `""` |
| `pgpool.initdbScriptsSecret` | Secret with scripts to be run every time Pgpool container is initialized | `""` |
| `pgpool.tls.enabled` | Enable TLS traffic support for end-client connections | `false` |
| `pgpool.tls.autoGenerated` | Create self-signed TLS certificates. Currently only supports PEM certificates | `false` |
| `pgpool.tls.preferServerCiphers` | Whether to use the server's TLS cipher preferences rather than the client's | `true` |
| `pgpool.tls.certificatesSecret` | Name of an existing secret that contains the certificates | `""` |
| `pgpool.tls.certFilename` | Certificate filename | `""` |
| `pgpool.tls.certKeyFilename` | Certificate key filename | `""` |
| `pgpool.tls.certCAFilename` | CA Certificate filename | `""` |
### LDAP parameters
@@ -757,88 +757,88 @@ A default `StorageClass` is needed in the Kubernetes cluster to dynamically prov
### Metrics parameters
| Name | Description | Value |
| ------------------------------------------------ | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ----------------------------------- |
| `metrics.enabled` | Enable PostgreSQL Prometheus exporter | `false` |
| `metrics.image.registry` | PostgreSQL Prometheus exporter image registry | `REGISTRY_NAME` |
| `metrics.image.repository` | PostgreSQL Prometheus exporter image repository | `REPOSITORY_NAME/postgres-exporter` |
| `metrics.image.digest` | PostgreSQL Prometheus exporter image digest in the way sha256:aa.... Please note this parameter, if set, will override the tag | `""` |
| `metrics.image.pullPolicy` | PostgreSQL Prometheus exporter image pull policy | `IfNotPresent` |
| `metrics.image.pullSecrets` | Specify docker-registry secret names as an array | `[]` |
| `metrics.image.debug` | Specify if debug logs should be enabled | `false` |
| `metrics.podSecurityContext.enabled` | Enable security context for PostgreSQL Prometheus exporter | `true` |
| `metrics.podSecurityContext.seLinuxOptions` | Set SELinux options in container | `nil` |
| `metrics.podSecurityContext.runAsUser` | User ID for the PostgreSQL Prometheus exporter container | `1001` |
| `metrics.podSecurityContext.runAsGroup` | Group ID for the PostgreSQL Prometheus exporter container | `1001` |
| `metrics.podSecurityContext.runAsNonRoot` | Set PostgreSQL Prometheus exporter container's Security Context runAsNonRoot | `true` |
| `metrics.podSecurityContext.seccompProfile.type` | Set PostgreSQL Prometheus exporter container's Security Context seccompProfile | `RuntimeDefault` |
| `metrics.resourcesPreset` | Set container resources according to one common preset (allowed values: none, nano, small, medium, large, xlarge, 2xlarge). This is ignored if metrics.resources is set (metrics.resources is recommended for production). | `nano` |
| `metrics.resources` | Set container requests and limits for different resources like CPU or memory (essential for production workloads) | `{}` |
| `metrics.containerPorts.http` | Prometheus metrics exporter port | `9187` |
| `metrics.livenessProbe.enabled` | Enable livenessProbe | `true` |
| `metrics.livenessProbe.initialDelaySeconds` | Initial delay seconds for livenessProbe | `30` |
| `metrics.livenessProbe.periodSeconds` | Period seconds for livenessProbe | `10` |
| `metrics.livenessProbe.timeoutSeconds` | Timeout seconds for livenessProbe | `5` |
| `metrics.livenessProbe.failureThreshold` | Failure threshold for livenessProbe | `6` |
| `metrics.livenessProbe.successThreshold` | Success threshold for livenessProbe | `1` |
| `metrics.readinessProbe.enabled` | Enable readinessProbe | `true` |
| `metrics.readinessProbe.initialDelaySeconds` | Initial delay seconds for readinessProbe | `5` |
| `metrics.readinessProbe.periodSeconds` | Period seconds for readinessProbe | `10` |
| `metrics.readinessProbe.timeoutSeconds` | Timeout seconds for readinessProbe | `5` |
| `metrics.readinessProbe.failureThreshold` | Failure threshold for readinessProbe | `6` |
| `metrics.readinessProbe.successThreshold` | Success threshold for readinessProbe | `1` |
| `metrics.startupProbe.enabled` | Enable startupProbe | `false` |
| `metrics.startupProbe.initialDelaySeconds` | Initial delay seconds for startupProbe | `5` |
| `metrics.startupProbe.periodSeconds` | Period seconds for startupProbe | `10` |
| `metrics.startupProbe.timeoutSeconds` | Timeout seconds for startupProbe | `5` |
| `metrics.startupProbe.failureThreshold` | Failure threshold for startupProbe | `10` |
| `metrics.startupProbe.successThreshold` | Success threshold for startupProbe | `1` |
| `metrics.customLivenessProbe` | Override default liveness probe | `{}` |
| `metrics.customReadinessProbe` | Override default readiness probe | `{}` |
| `metrics.customStartupProbe` | Override default startup probe | `{}` |
| `metrics.service.enabled` | PostgreSQL Prometheus exporter metrics service enabled | `true` |
| `metrics.service.type` | PostgreSQL Prometheus exporter metrics service type | `ClusterIP` |
| `metrics.service.ports.metrics` | PostgreSQL Prometheus exporter metrics service port | `9187` |
| `metrics.service.nodePorts.metrics` | PostgreSQL Prometheus exporter Node Port | `""` |
| `metrics.service.clusterIP` | PostgreSQL Prometheus exporter metrics service Cluster IP | `""` |
| `metrics.service.loadBalancerIP` | PostgreSQL Prometheus exporter service Load Balancer IP | `""` |
| `metrics.service.loadBalancerSourceRanges` | PostgreSQL Prometheus exporter service Load Balancer sources | `[]` |
| `metrics.service.externalTrafficPolicy` | PostgreSQL Prometheus exporter service external traffic policy | `Cluster` |
| `metrics.annotations` | Annotations for PostgreSQL Prometheus exporter service | `{}` |
| `metrics.customMetrics` | Additional custom metrics | `{}` |
| `metrics.extraEnvVars` | Array containing extra environment variables | `[]` |
| `metrics.extraEnvVarsCM` | ConfigMap with extra environment variables | `""` |
| `metrics.extraEnvVarsSecret` | Secret with extra environment variables | `""` |
| `metrics.serviceMonitor.enabled` | if `true`, creates a Prometheus Operator ServiceMonitor (also requires `metrics.enabled` to be `true`) | `false` |
| `metrics.serviceMonitor.namespace` | Optional namespace which Prometheus is running in | `""` |
| `metrics.serviceMonitor.interval` | How frequently to scrape metrics (use by default, falling back to Prometheus' default) | `""` |
| `metrics.serviceMonitor.scrapeTimeout` | Service monitor scrape timeout | `""` |
| `metrics.serviceMonitor.annotations` | Additional annotations for the ServiceMonitor | `{}` |
| `metrics.serviceMonitor.labels` | Additional labels that can be used so ServiceMonitor will be discovered by Prometheus | `{}` |
| `metrics.serviceMonitor.selector` | Defaults to what's used if you follow CoreOS Prometheus Install Instructions (<https://github.com/bitnami/charts/tree/main/bitnami/kube-prometheus#tldr>) | `{}` |
| `metrics.serviceMonitor.relabelings` | ServiceMonitor relabelings. Value is evaluated as a template | `[]` |
| `metrics.serviceMonitor.metricRelabelings` | ServiceMonitor metricRelabelings. Value is evaluated as a template | `[]` |
| `metrics.serviceMonitor.honorLabels` | Specify honorLabels parameter to add the scrape endpoint | `false` |
| `metrics.serviceMonitor.jobLabel` | The name of the label on the target service to use as the job name in prometheus. | `""` |
| Name | Description | Value |
| ------------------------------------------------ | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ----------------------------------- |
| `metrics.enabled` | Enable PostgreSQL Prometheus exporter | `false` |
| `metrics.image.registry` | PostgreSQL Prometheus exporter image registry | `REGISTRY_NAME` |
| `metrics.image.repository` | PostgreSQL Prometheus exporter image repository | `REPOSITORY_NAME/postgres-exporter` |
| `metrics.image.digest` | PostgreSQL Prometheus exporter image digest in the way sha256:aa.... Please note this parameter, if set, will override the tag | `""` |
| `metrics.image.pullPolicy` | PostgreSQL Prometheus exporter image pull policy | `IfNotPresent` |
| `metrics.image.pullSecrets` | Specify docker-registry secret names as an array | `[]` |
| `metrics.image.debug` | Specify if debug logs should be enabled | `false` |
| `metrics.podSecurityContext.enabled` | Enable security context for PostgreSQL Prometheus exporter | `true` |
| `metrics.podSecurityContext.seLinuxOptions` | Set SELinux options in container | `nil` |
| `metrics.podSecurityContext.runAsUser` | User ID for the PostgreSQL Prometheus exporter container | `1001` |
| `metrics.podSecurityContext.runAsGroup` | Group ID for the PostgreSQL Prometheus exporter container | `1001` |
| `metrics.podSecurityContext.runAsNonRoot` | Set PostgreSQL Prometheus exporter container's Security Context runAsNonRoot | `true` |
| `metrics.podSecurityContext.seccompProfile.type` | Set PostgreSQL Prometheus exporter container's Security Context seccompProfile | `RuntimeDefault` |
| `metrics.resourcesPreset` | Set container resources according to one common preset (allowed values: none, nano, micro, small, medium, large, xlarge, 2xlarge). This is ignored if metrics.resources is set (metrics.resources is recommended for production). | `nano` |
| `metrics.resources` | Set container requests and limits for different resources like CPU or memory (essential for production workloads) | `{}` |
| `metrics.containerPorts.http` | Prometheus metrics exporter port | `9187` |
| `metrics.livenessProbe.enabled` | Enable livenessProbe | `true` |
| `metrics.livenessProbe.initialDelaySeconds` | Initial delay seconds for livenessProbe | `30` |
| `metrics.livenessProbe.periodSeconds` | Period seconds for livenessProbe | `10` |
| `metrics.livenessProbe.timeoutSeconds` | Timeout seconds for livenessProbe | `5` |
| `metrics.livenessProbe.failureThreshold` | Failure threshold for livenessProbe | `6` |
| `metrics.livenessProbe.successThreshold` | Success threshold for livenessProbe | `1` |
| `metrics.readinessProbe.enabled` | Enable readinessProbe | `true` |
| `metrics.readinessProbe.initialDelaySeconds` | Initial delay seconds for readinessProbe | `5` |
| `metrics.readinessProbe.periodSeconds` | Period seconds for readinessProbe | `10` |
| `metrics.readinessProbe.timeoutSeconds` | Timeout seconds for readinessProbe | `5` |
| `metrics.readinessProbe.failureThreshold` | Failure threshold for readinessProbe | `6` |
| `metrics.readinessProbe.successThreshold` | Success threshold for readinessProbe | `1` |
| `metrics.startupProbe.enabled` | Enable startupProbe | `false` |
| `metrics.startupProbe.initialDelaySeconds` | Initial delay seconds for startupProbe | `5` |
| `metrics.startupProbe.periodSeconds` | Period seconds for startupProbe | `10` |
| `metrics.startupProbe.timeoutSeconds` | Timeout seconds for startupProbe | `5` |
| `metrics.startupProbe.failureThreshold` | Failure threshold for startupProbe | `10` |
| `metrics.startupProbe.successThreshold` | Success threshold for startupProbe | `1` |
| `metrics.customLivenessProbe` | Override default liveness probe | `{}` |
| `metrics.customReadinessProbe` | Override default readiness probe | `{}` |
| `metrics.customStartupProbe` | Override default startup probe | `{}` |
| `metrics.service.enabled` | PostgreSQL Prometheus exporter metrics service enabled | `true` |
| `metrics.service.type` | PostgreSQL Prometheus exporter metrics service type | `ClusterIP` |
| `metrics.service.ports.metrics` | PostgreSQL Prometheus exporter metrics service port | `9187` |
| `metrics.service.nodePorts.metrics` | PostgreSQL Prometheus exporter Node Port | `""` |
| `metrics.service.clusterIP` | PostgreSQL Prometheus exporter metrics service Cluster IP | `""` |
| `metrics.service.loadBalancerIP` | PostgreSQL Prometheus exporter service Load Balancer IP | `""` |
| `metrics.service.loadBalancerSourceRanges` | PostgreSQL Prometheus exporter service Load Balancer sources | `[]` |
| `metrics.service.externalTrafficPolicy` | PostgreSQL Prometheus exporter service external traffic policy | `Cluster` |
| `metrics.annotations` | Annotations for PostgreSQL Prometheus exporter service | `{}` |
| `metrics.customMetrics` | Additional custom metrics | `{}` |
| `metrics.extraEnvVars` | Array containing extra environment variables | `[]` |
| `metrics.extraEnvVarsCM` | ConfigMap with extra environment variables | `""` |
| `metrics.extraEnvVarsSecret` | Secret with extra environment variables | `""` |
| `metrics.serviceMonitor.enabled` | if `true`, creates a Prometheus Operator ServiceMonitor (also requires `metrics.enabled` to be `true`) | `false` |
| `metrics.serviceMonitor.namespace` | Optional namespace which Prometheus is running in | `""` |
| `metrics.serviceMonitor.interval` | How frequently to scrape metrics (use by default, falling back to Prometheus' default) | `""` |
| `metrics.serviceMonitor.scrapeTimeout` | Service monitor scrape timeout | `""` |
| `metrics.serviceMonitor.annotations` | Additional annotations for the ServiceMonitor | `{}` |
| `metrics.serviceMonitor.labels` | Additional labels that can be used so ServiceMonitor will be discovered by Prometheus | `{}` |
| `metrics.serviceMonitor.selector` | Defaults to what's used if you follow CoreOS Prometheus Install Instructions (<https://github.com/bitnami/charts/tree/main/bitnami/kube-prometheus#tldr>) | `{}` |
| `metrics.serviceMonitor.relabelings` | ServiceMonitor relabelings. Value is evaluated as a template | `[]` |
| `metrics.serviceMonitor.metricRelabelings` | ServiceMonitor metricRelabelings. Value is evaluated as a template | `[]` |
| `metrics.serviceMonitor.honorLabels` | Specify honorLabels parameter to add the scrape endpoint | `false` |
| `metrics.serviceMonitor.jobLabel` | The name of the label on the target service to use as the job name in prometheus. | `""` |
### Volume permissions parameters
| Name | Description | Value |
| ---------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -------------------------- |
| `volumePermissions.enabled` | Enable init container to adapt volume permissions | `false` |
| `volumePermissions.image.registry` | Init container volume-permissions image registry | `REGISTRY_NAME` |
| `volumePermissions.image.repository` | Init container volume-permissions image repository | `REPOSITORY_NAME/os-shell` |
| `volumePermissions.image.digest` | Init container volume-permissions image digest in the way sha256:aa.... Please note this parameter, if set, will override the tag | `""` |
| `volumePermissions.image.pullPolicy` | Init container volume-permissions image pull policy | `IfNotPresent` |
| `volumePermissions.image.pullSecrets` | Specify docker-registry secret names as an array | `[]` |
| `volumePermissions.podSecurityContext.enabled` | Whether to enable security context for the volume-permissions init container | `true` |
| `volumePermissions.podSecurityContext.seLinuxOptions` | Set SELinux options in container | `nil` |
| `volumePermissions.podSecurityContext.runAsUser` | Init container volume-permissions User ID | `0` |
| `volumePermissions.podSecurityContext.runAsGroup` | Group ID for the init container volume-permissions container | `0` |
| `volumePermissions.podSecurityContext.runAsNonRoot` | Set Security Context runAsNonRoot for the init container volume-permissions container | `false` |
| `volumePermissions.podSecurityContext.seccompProfile.type` | Set Security Context seccompProfile for the init container volume-permissions container | `RuntimeDefault` |
| `volumePermissions.resourcesPreset` | Set container resources according to one common preset (allowed values: none, nano, small, medium, large, xlarge, 2xlarge). This is ignored if volumePermissions.resources is set (volumePermissions.resources is recommended for production). | `nano` |
| `volumePermissions.resources` | Set container requests and limits for different resources like CPU or memory (essential for production workloads) | `{}` |
| Name | Description | Value |
| ---------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -------------------------- |
| `volumePermissions.enabled` | Enable init container to adapt volume permissions | `false` |
| `volumePermissions.image.registry` | Init container volume-permissions image registry | `REGISTRY_NAME` |
| `volumePermissions.image.repository` | Init container volume-permissions image repository | `REPOSITORY_NAME/os-shell` |
| `volumePermissions.image.digest` | Init container volume-permissions image digest in the way sha256:aa.... Please note this parameter, if set, will override the tag | `""` |
| `volumePermissions.image.pullPolicy` | Init container volume-permissions image pull policy | `IfNotPresent` |
| `volumePermissions.image.pullSecrets` | Specify docker-registry secret names as an array | `[]` |
| `volumePermissions.podSecurityContext.enabled` | Whether to enable security context for the volume-permissions init container | `true` |
| `volumePermissions.podSecurityContext.seLinuxOptions` | Set SELinux options in container | `nil` |
| `volumePermissions.podSecurityContext.runAsUser` | Init container volume-permissions User ID | `0` |
| `volumePermissions.podSecurityContext.runAsGroup` | Group ID for the init container volume-permissions container | `0` |
| `volumePermissions.podSecurityContext.runAsNonRoot` | Set Security Context runAsNonRoot for the init container volume-permissions container | `false` |
| `volumePermissions.podSecurityContext.seccompProfile.type` | Set Security Context seccompProfile for the init container volume-permissions container | `RuntimeDefault` |
| `volumePermissions.resourcesPreset` | Set container resources according to one common preset (allowed values: none, nano, micro, small, medium, large, xlarge, 2xlarge). This is ignored if volumePermissions.resources is set (volumePermissions.resources is recommended for production). | `nano` |
| `volumePermissions.resources` | Set container requests and limits for different resources like CPU or memory (essential for production workloads) | `{}` |
### Persistence parameters
@@ -1220,4 +1220,4 @@ Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
limitations under the License.

View File

@@ -111,7 +111,7 @@ postgresql:
image:
registry: docker.io
repository: bitnami/postgresql-repmgr
tag: 16.2.0-debian-12-r6
tag: 16.2.0-debian-12-r8
digest: ""
## Specify a imagePullPolicy. Defaults to 'Always' if image tag is 'latest', else set to 'IfNotPresent'
## ref: https://kubernetes.io/docs/concepts/containers/images/#pre-pulled-images
@@ -1128,7 +1128,7 @@ pgpool:
image:
registry: docker.io
repository: bitnami/pgpool
tag: 4.5.1-debian-12-r0
tag: 4.5.1-debian-12-r2
digest: ""
## Specify a imagePullPolicy. Defaults to 'Always' if image tag is 'latest', else set to 'IfNotPresent'
## ref: https://kubernetes.io/docs/concepts/containers/images/#pre-pulled-images
@@ -1707,7 +1707,7 @@ metrics:
image:
registry: docker.io
repository: bitnami/postgres-exporter
tag: 0.15.0-debian-12-r14
tag: 0.15.0-debian-12-r16
digest: ""
## Specify a imagePullPolicy. Defaults to 'Always' if image tag is 'latest', else set to 'IfNotPresent'
## ref: https://kubernetes.io/docs/concepts/containers/images/#pre-pulled-images
@@ -1958,7 +1958,7 @@ volumePermissions:
image:
registry: docker.io
repository: bitnami/os-shell
tag: 12-debian-12-r16
tag: 12-debian-12-r18
digest: ""
## Specify a imagePullPolicy. Defaults to 'Always' if image tag is 'latest', else set to 'IfNotPresent'
## ref: https://kubernetes.io/docs/concepts/containers/images/#pre-pulled-images