• v0.1.9 9e201b6bc7

    v0.1.9 Stable

    pipeline-bot released this 2026-07-07 16:55:41 +00:00 | 476 commits to main since this release

    Removed

    • CNPG PgBouncer Pooler (postgres-pooler-rw) removed — incompatible with this cluster's
      external-CA design.
      CNPG must sign the pooler's pgbouncer client cert with the CA private
      key, but our CA secret (postgres-server-tls) carries only ca.crt — the private key lives
      solely in OpenBao PKI and never enters the cluster (by design). The pooler wedged the CNPG
      cluster reconcile with cannot create Cluster auxiliary objects: missing ca.key secret data,
      latching phase: Unable to create required cluster objects (data plane stayed 5/5 healthy).
      max_connections=400 + shared_buffers=2GB (v0.1.7) already deliver the concurrency relief;
      a pooler would need ALL its TLS/auth secrets provided explicitly so CNPG never signs anything.

    Included changes (v0.1.8 -> v0.1.9)

    • 295155d0808e fix(cnpg): remove PgBouncer Pooler — incompatible with external-CA
    Downloads