-
v0.1.9 Stable
released this
2026-07-07 16:55:41 +00:00 | 476 commits to main since this releaseRemoved
- CNPG PgBouncer
Pooler(postgres-pooler-rw) removed — incompatible with this cluster's
external-CA design. CNPG must sign the pooler's pgbouncer client cert with the CA private
key, but our CA secret (postgres-server-tls) carries onlyca.crt— the private key lives
solely in OpenBao PKI and never enters the cluster (by design). The pooler wedged the CNPG
cluster reconcile withcannot create Cluster auxiliary objects: missing ca.key secret data,
latchingphase: Unable to create required cluster objects(data plane stayed 5/5 healthy).
max_connections=400+shared_buffers=2GB(v0.1.7) already deliver the concurrency relief;
a pooler would need ALL its TLS/auth secrets provided explicitly so CNPG never signs anything.
Included changes (v0.1.8 -> v0.1.9)
295155d0808efix(cnpg): remove PgBouncer Pooler — incompatible with external-CA
Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
1 download
- CNPG PgBouncer