chore(deps): update ghcr.io/cloudnative-pg/postgresql docker tag to v18.4

fix: wrong naming
feat: improve template formatting
2026-05-18 19:49:36 +00:00 · 2026-05-18 14:48:56 -05:00 · 2026-05-17 21:59:53 -05:00 · 2026-05-17 20:56:50 -05:00 · 2026-05-17 20:54:58 -05:00 · 2026-05-17 20:54:58 -05:00
29 changed files with 165 additions and 121 deletions
@@ -1,6 +1,6 @@
 dependencies:
 - name: common
  repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 5.0.0
-digest: sha256:153788a98eab8a2e83bd456e1f6f3d53d1a3363bfe5bca07bd232d948e01a6b2
-generated: "2026-05-07T20:55:55.373128-05:00"
+  version: 5.0.1
+digest: sha256:754f21ee6fca6dc4a85e91384ff0b919b715234d764ef344bd3bbe93414275d3
+generated: "2026-05-17T20:56:16.253838-05:00"
@@ -1,6 +1,6 @@
 apiVersion: v2
 name: cloudflared
-version: 3.2.2
+version: 3.3.1
 description: Cloudflared Tunnel
 keywords:
  - cloudflare
@@ -14,7 +14,7 @@ maintainers:
 dependencies:
  - name: common
    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 5.0.0
+    version: 5.0.1
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/cloudflare.png
 # renovate: datasource=docker depName=cloudflare/cloudflared
-appVersion: 2026.3.0
+appVersion: 2026.5.0
@@ -1,6 +1,6 @@
 # cloudflared

-![Version: 3.2.2](https://img.shields.io/badge/Version-3.2.2-informational?style=flat-square) ![AppVersion: 2026.3.0](https://img.shields.io/badge/AppVersion-2026.3.0-informational?style=flat-square)
+![Version: 3.3.1](https://img.shields.io/badge/Version-3.3.1-informational?style=flat-square) ![AppVersion: 2026.5.0](https://img.shields.io/badge/AppVersion-2026.5.0-informational?style=flat-square)

 Cloudflared Tunnel

@@ -20,13 +20,13 @@ Cloudflared Tunnel

 | Repository | Name | Version |
 |------------|------|---------|
-| https://bjw-s-labs.github.io/helm-charts/ | common | 5.0.0 |
+| https://bjw-s-labs.github.io/helm-charts/ | common | 5.0.1 |

 ## Values

 | Key | Type | Default | Description |
 |-----|------|---------|-------------|
-| image | object | `{"pullPolicy":"IfNotPresent","repository":"cloudflare/cloudflared","tag":"2026.3.0@sha256:6b599ca3e974349ead3286d178da61d291961182ec3fe9c505e1dd02c8ac31b0"}` | Default image |
+| image | object | `{"pullPolicy":"IfNotPresent","repository":"cloudflare/cloudflared","tag":"2026.5.0@sha256:59bab8d3aceec09bf6bdb07d6beca0225ca5cd7ab79436a87ea97978fe1dc4f9"}` | Default image |
 | metrics | object | `{"enabled":true}` | Metrics |
 | name | string | `""` | Name override of release |
 | protocol | string | `"auto"` | Protocol - Available values are auto, http2, and quic. |
@@ -33,7 +33,7 @@ secret:
 # -- Default image
 image:
  repository: cloudflare/cloudflared
-  tag: 2026.3.0@sha256:6b599ca3e974349ead3286d178da61d291961182ec3fe9c505e1dd02c8ac31b0
+  tag: 2026.5.0@sha256:59bab8d3aceec09bf6bdb07d6beca0225ca5cd7ab79436a87ea97978fe1dc4f9
  pullPolicy: IfNotPresent

 # -- Default resources
@@ -1,6 +1,6 @@
 dependencies:
 - name: common
  repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 5.0.0
-digest: sha256:153788a98eab8a2e83bd456e1f6f3d53d1a3363bfe5bca07bd232d948e01a6b2
-generated: "2026-05-07T20:58:40.139936-05:00"
+  version: 5.0.1
+digest: sha256:754f21ee6fca6dc4a85e91384ff0b919b715234d764ef344bd3bbe93414275d3
+generated: "2026-05-17T20:56:28.479119-05:00"
@@ -1,6 +1,6 @@
 apiVersion: v2
 name: generic-device-plugin
-version: 0.21.2
+version: 0.21.6
 description: Generic Device Plugin
 keywords:
  - generic-device-plugin
@@ -14,5 +14,5 @@ maintainers:
 dependencies:
  - name: common
    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 5.0.0
+    version: 5.0.1
 appVersion: 0.21.1
@@ -1,6 +1,6 @@
 # generic-device-plugin

-![Version: 0.21.2](https://img.shields.io/badge/Version-0.21.2-informational?style=flat-square) ![AppVersion: 0.21.1](https://img.shields.io/badge/AppVersion-0.21.1-informational?style=flat-square)
+![Version: 0.21.6](https://img.shields.io/badge/Version-0.21.6-informational?style=flat-square) ![AppVersion: 0.21.1](https://img.shields.io/badge/AppVersion-0.21.1-informational?style=flat-square)

 Generic Device Plugin

@@ -19,7 +19,7 @@ Generic Device Plugin

 | Repository | Name | Version |
 |------------|------|---------|
-| https://bjw-s-labs.github.io/helm-charts/ | common | 5.0.0 |
+| https://bjw-s-labs.github.io/helm-charts/ | common | 5.0.1 |

 ## Values

@@ -28,7 +28,7 @@ Generic Device Plugin
 | config | object | `{"data":"devices:\n  - name: serial\n    groups:\n      - paths:\n          - path: /dev/ttyUSB*\n      - paths:\n          - path: /dev/ttyACM*\n      - paths:\n          - path: /dev/tty.usb*\n      - paths:\n          - path: /dev/cu.*\n      - paths:\n          - path: /dev/cuaU*\n      - paths:\n          - path: /dev/rfcomm*\n  - name: video\n    groups:\n      - paths:\n          - path: /dev/video0\n  - name: fuse\n    groups:\n      - count: 10\n        paths:\n          - path: /dev/fuse\n  - name: audio\n    groups:\n      - count: 10\n        paths:\n          - path: /dev/snd\n  - name: capture\n    groups:\n      - paths:\n          - path: /dev/snd/controlC0\n          - path: /dev/snd/pcmC0D0c\n      - paths:\n          - path: /dev/snd/controlC1\n            mountPath: /dev/snd/controlC0\n          - path: /dev/snd/pcmC1D0c\n            mountPath: /dev/snd/pcmC0D0c\n      - paths:\n          - path: /dev/snd/controlC2\n            mountPath: /dev/snd/controlC0\n          - path: /dev/snd/pcmC2D0c\n            mountPath: /dev/snd/pcmC0D0c\n      - paths:\n          - path: /dev/snd/controlC3\n            mountPath: /dev/snd/controlC0\n          - path: /dev/snd/pcmC3D0c\n            mountPath: /dev/snd/pcmC0D0c\n","enabled":true}` | Config map |
 | config.data | string | See [values.yaml](./values.yaml) | generic-device-plugin config file [[ref]](https://github.com/squat/generic-device-plugin#usage) |
 | deviceDomain | string | `"devic.es"` | Domain used by devices for identifcation |
-| image | object | `{"pullPolicy":"Always","repository":"ghcr.io/squat/generic-device-plugin","tag":"latest@sha256:7bc1ecec8472be1e5cf1ce534f0438a1d48cc3e2b4997cee924dac4d3dbfc3d3"}` | Default image |
+| image | object | `{"pullPolicy":"Always","repository":"ghcr.io/squat/generic-device-plugin","tag":"latest@sha256:dc192e164c69b03f156765793a1be62ca437709ae477b27ca7d8f3dcf5021576"}` | Default image |
 | name | string | `"generic-device-plugin"` | Name override of release |
 | resources | object | `{"requests":{"cpu":"50m","memory":"10Mi"}}` | Default resources |
 | service | object | `{"listenPort":8080}` | Service port |
@@ -4,7 +4,7 @@ name: generic-device-plugin
 # -- Default image
 image:
  repository: ghcr.io/squat/generic-device-plugin
-  tag: latest@sha256:7bc1ecec8472be1e5cf1ce534f0438a1d48cc3e2b4997cee924dac4d3dbfc3d3
+  tag: latest@sha256:dc192e164c69b03f156765793a1be62ca437709ae477b27ca7d8f3dcf5021576
  pullPolicy: Always

 # -- Domain used by devices for identifcation
@@ -1,6 +1,6 @@
 apiVersion: v2
 name: postgres-cluster
-version: 7.12.1
+version: 7.14.0
 description: Cloudnative-pg Cluster
 keywords:
  - database
@@ -12,4 +12,4 @@ maintainers:
  - name: alexlebens
 icon: https://avatars.githubusercontent.com/u/100373852?s=48&v=4
 # renovate: datasource=github-releases depName=cloudnative-pg/cloudnative-pg
-appVersion: v1.29.0
+appVersion: v1.29.1
@@ -1,6 +1,6 @@
 # postgres-cluster

-![Version: 7.12.1](https://img.shields.io/badge/Version-7.12.1-informational?style=flat-square) ![AppVersion: v1.29.0](https://img.shields.io/badge/AppVersion-v1.29.0-informational?style=flat-square)
+![Version: 7.13.3](https://img.shields.io/badge/Version-7.13.3-informational?style=flat-square) ![AppVersion: v1.29.1](https://img.shields.io/badge/AppVersion-v1.29.1-informational?style=flat-square)

 Cloudnative-pg Cluster

@@ -19,12 +19,12 @@ Cloudnative-pg Cluster

 | Key | Type | Default | Description |
 |-----|------|---------|-------------|
-| backup | object | `{"externalSecret":{"enabled":true},"method":"objectStore","objectStore":null,"scheduledBackups":[]}` | Backup settings |
+| backup | object | `{"externalSecret":{"enabled":true},"method":"objectStore","objectStore":[],"scheduledBackups":[]}` | Backup settings |
 | backup.externalSecret | object | `{"enabled":true}` | Use generated External Secrets, credentialPath points at path in cluster store that contains the keys ACCESS_KEY_ID and ACCESS_SECRET_KEY |
 | backup.method | string | `"objectStore"` | Method to create backups, options currently are only objectStore |
-| backup.objectStore | string | `nil` | Options for object store backups |
+| backup.objectStore | list | `[]` | Options for object store backups |
 | backup.scheduledBackups | list | `[]` | List of scheduled backups |
-| cluster | object | `{"additionalLabels":{},"affinity":{"enablePodAntiAffinity":true,"topologyKey":"kubernetes.io/hostname"},"annotations":{},"certificates":{},"enablePDB":true,"enableSuperuserAccess":false,"image":{"repository":"ghcr.io/cloudnative-pg/postgresql","tag":"18.3-standard-trixie"},"imagePullPolicy":"IfNotPresent","imagePullSecrets":[],"initdb":{"database":"app","owner":"app"},"instances":3,"logLevel":"info","monitoring":{"customQueries":[],"customQueriesSecret":[],"disableDefaultQueries":false,"enabled":true,"podMonitor":{"enabled":true,"metricRelabelings":[],"relabelings":[]},"prometheusRule":{"enabled":true,"excludeRules":["CNPGClusterLastFailedArchiveTimeWarning"]}},"postgresGID":-1,"postgresUID":-1,"postgresql":{"ldap":{},"parameters":{"hot_standby_feedback":"on","max_slot_wal_keep_size":"2000MB","shared_buffers":"128MB"},"pg_hba":[],"pg_ident":[],"shared_preload_libraries":[],"synchronous":{}},"primaryUpdateMethod":"switchover","primaryUpdateStrategy":"unsupervised","priorityClassName":"","resources":{"limits":{"hugepages-2Mi":"256Mi"},"requests":{"cpu":"20m","memory":"80Mi"}},"roles":[],"serviceAccountTemplate":{},"services":{},"storage":{"size":"10Gi","storageClass":"local-path"},"superuserSecret":"","walStorage":{"enabled":true,"size":"2Gi","storageClass":"local-path"}}` | Cluster settings |
+| cluster | object | `{"additionalLabels":{},"affinity":{"enablePodAntiAffinity":true,"topologyKey":"kubernetes.io/hostname"},"annotations":{},"certificates":{},"enablePDB":true,"enableSuperuserAccess":false,"image":{"repository":"ghcr.io/cloudnative-pg/postgresql","tag":"18.3-standard-trixie"},"imagePullPolicy":"IfNotPresent","imagePullSecrets":[],"initdb":{"database":"app","owner":"app"},"instances":3,"logLevel":"info","monitoring":{"customQueries":[],"customQueriesSecret":[],"disableDefaultQueries":false,"enabled":true,"podMonitor":{"enabled":true,"metricRelabelings":[],"relabelings":[]},"prometheusRule":{"enabled":true,"excludeRules":["CNPGClusterLastFailedArchiveTimeWarning"]}},"postgresGID":-1,"postgresUID":-1,"postgresql":{"ldap":{},"parameters":{"hot_standby_feedback":"on","max_slot_wal_keep_size":"2000MB","shared_buffers":"512MB"},"pg_hba":[],"pg_ident":[],"shared_preload_libraries":[],"synchronous":{}},"primaryUpdateMethod":"switchover","primaryUpdateStrategy":"unsupervised","priorityClassName":"","resources":{"limits":{"hugepages-2Mi":"256Mi"},"requests":{"cpu":"20m","memory":"80Mi"}},"roles":[],"serviceAccountTemplate":{},"services":{},"storage":{"size":"10Gi","storageClass":"local-path"},"superuserSecret":"","walStorage":{"enabled":true,"size":"2Gi","storageClass":"local-path"}}` | Cluster settings |
 | cluster.affinity | object | `{"enablePodAntiAffinity":true,"topologyKey":"kubernetes.io/hostname"}` | Affinity/Anti-affinity rules for Pods. See: https://cloudnative-pg.io/documentation/current/cloudnative-pg.v1/#postgresql-cnpg-io-v1-AffinityConfiguration |
 | cluster.certificates | object | `{}` | The configuration for the CA and related certificates. See: https://cloudnative-pg.io/documentation/current/cloudnative-pg.v1/#postgresql-cnpg-io-v1-CertificatesConfiguration |
 | cluster.enablePDB | bool | `true` | Allow to disable PDB, mainly useful for upgrade of single-instance clusters or development purposes See: https://cloudnative-pg.io/documentation/current/kubernetes_upgrade/#pod-disruption-budgets |
@@ -42,12 +42,13 @@ Cloudnative-pg Cluster
 | cluster.monitoring.podMonitor.enabled | bool | `true` | Whether to enable the PodMonitor |
 | cluster.monitoring.podMonitor.metricRelabelings | list | `[]` | The list of metric relabelings for the PodMonitor. Applied to samples before ingestion. |
 | cluster.monitoring.podMonitor.relabelings | list | `[]` | The list of relabelings for the PodMonitor. Applied to samples before scraping. |
+| cluster.monitoring.prometheusRule | object | `{"enabled":true,"excludeRules":["CNPGClusterLastFailedArchiveTimeWarning"]}` | Prometheus rule |
 | cluster.monitoring.prometheusRule.enabled | bool | `true` | Whether to enable the PrometheusRule automated alerts |
 | cluster.monitoring.prometheusRule.excludeRules | list | `["CNPGClusterLastFailedArchiveTimeWarning"]` | Exclude specified rules |
 | cluster.postgresUID | int | `-1` | The UID and GID of the postgres user inside the image, defaults to 26 |
-| cluster.postgresql | object | `{"ldap":{},"parameters":{"hot_standby_feedback":"on","max_slot_wal_keep_size":"2000MB","shared_buffers":"128MB"},"pg_hba":[],"pg_ident":[],"shared_preload_libraries":[],"synchronous":{}}` | Parameters to be set for the database itself See: https://cloudnative-pg.io/documentation/current/cloudnative-pg.v1/#postgresql-cnpg-io-v1-PostgresConfiguration |
+| cluster.postgresql | object | `{"ldap":{},"parameters":{"hot_standby_feedback":"on","max_slot_wal_keep_size":"2000MB","shared_buffers":"512MB"},"pg_hba":[],"pg_ident":[],"shared_preload_libraries":[],"synchronous":{}}` | Parameters to be set for the database itself See: https://cloudnative-pg.io/documentation/current/cloudnative-pg.v1/#postgresql-cnpg-io-v1-PostgresConfiguration |
 | cluster.postgresql.ldap | object | `{}` | PostgreSQL LDAP configuration (see https://cloudnative-pg.io/documentation/current/postgresql_conf/#ldap-configuration) |
-| cluster.postgresql.parameters | object | `{"hot_standby_feedback":"on","max_slot_wal_keep_size":"2000MB","shared_buffers":"128MB"}` | PostgreSQL configuration options (postgresql.conf) |
+| cluster.postgresql.parameters | object | `{"hot_standby_feedback":"on","max_slot_wal_keep_size":"2000MB","shared_buffers":"512MB"}` | PostgreSQL configuration options (postgresql.conf) |
 | cluster.postgresql.pg_hba | list | `[]` | PostgreSQL Host Based Authentication rules (lines to be appended to the pg_hba.conf file) |
 | cluster.postgresql.pg_ident | list | `[]` | PostgreSQL User Name Maps rules (lines to be appended to the pg_ident.conf file) |
 | cluster.postgresql.shared_preload_libraries | list | `[]` | Lists of shared preload libraries to add to the default ones |
@@ -1,12 +1,11 @@
 {{- define "cluster.bootstrap" -}}
-
-{{- if eq .Values.mode "standalone" }}
+{{- if eq .Values.mode "standalone" -}}
 bootstrap:
  initdb:
    {{- with .Values.cluster.initdb }}
-        {{- with (omit . "postInitApplicationSQL" "owner" "import") }}
-            {{- . | toYaml | nindent 4 }}
-        {{- end }}
+      {{- with (omit . "postInitApplicationSQL" "owner" "import") }}
+      {{- . | toYaml | nindent 4 }}
+      {{- end }}
    {{- end }}
    {{- if .Values.cluster.initdb.owner }}
    owner: {{ tpl .Values.cluster.initdb.owner . }}
@@ -14,20 +13,18 @@ bootstrap:
    {{- if (.Values.cluster.initdb.postInitApplicationSQL) }}
    postInitApplicationSQL:
      {{- with .Values.cluster.initdb }}
-        {{- range .postInitApplicationSQL }}
-          {{- printf "- %s" . | nindent 6 }}
-        {{- end -}}
+      {{- range .postInitApplicationSQL }}
+      {{- printf "- %s" . | nindent 6 }}
+      {{- end }}
      {{- end }}
    {{- end }}
-
 {{- else if eq .Values.mode "recovery" -}}
 bootstrap:
-
  {{- if eq .Values.recovery.method "import" }}
  initdb:
    {{- with .Values.cluster.initdb }}
      {{- with (omit . "owner" "import" "postInitApplicationSQL") }}
-        {{- . | toYaml | nindent 4 }}
+      {{- . | toYaml | nindent 4 }}
      {{- end }}
    {{- end }}
    {{- if .Values.cluster.initdb.owner }}
@@ -58,50 +55,45 @@ bootstrap:
        {{- end }}
      {{- end }}
      schemaOnly: {{ .Values.recovery.import.schemaOnly }}
-      {{ with .Values.recovery.import.pgDumpExtraOptions }}
+      {{- with .Values.recovery.import.pgDumpExtraOptions }}
      pgDumpExtraOptions:
        {{- . | toYaml | nindent 8 }}
      {{- end }}
-      {{ with .Values.recovery.import.pgRestoreExtraOptions }}
+      {{- with .Values.recovery.import.pgRestoreExtraOptions }}
      pgRestoreExtraOptions:
        {{- . | toYaml | nindent 8 }}
      {{- end }}
-
  {{- else if eq .Values.recovery.method "backup" }}
  recovery:
    {{- with .Values.recovery.backup.pitrTarget.time }}
    recoveryTarget:
      targetTime: {{ . }}
    {{- end }}
-    {{ with .Values.recovery.backup.database }}
+    {{- with .Values.recovery.backup.database }}
    database: {{ . }}
    {{- end }}
-    {{ with .Values.recovery.backup.owner }}
+    {{- with .Values.recovery.backup.owner }}
    owner: {{ . }}
    {{- end }}
    backup:
      name: {{ .Values.recovery.backup.backupName }}
-
  {{- else if eq .Values.recovery.method "objectStore" }}
  recovery:
    {{- with .Values.recovery.objectStore.pitrTarget.time }}
    recoveryTarget:
      targetTime: {{ . }}
    {{- end }}
-    {{ with .Values.recovery.objectStore.database }}
+    {{- with .Values.recovery.objectStore.database }}
    database: {{ . }}
    {{- end }}
-    {{ with .Values.recovery.objectStore.owner }}
+    {{- with .Values.recovery.objectStore.owner }}
    owner: {{ . }}
    {{- end }}
    source: {{ include "cluster.recoveryServerName" . }}
-
-  {{-  else }}
+  {{- else -}}
    {{ fail "Invalid recovery mode!" }}
-  {{- end }}
-
-{{-  else }}
+  {{- end -}}
+{{- else -}}
  {{ fail "Invalid cluster mode!" }}
-{{- end }}
-
-{{- end }}
+{{- end -}}
+{{- end -}}
@@ -1,6 +1,6 @@
 {{- define "cluster.externalClusters" -}}
-{{- if eq .Values.mode "standalone" }}
-{{- else if eq .Values.mode "recovery" }}
+{{- if eq .Values.mode "standalone" -}}
+{{- else if eq .Values.mode "recovery" -}}
 externalClusters:
  {{- if eq .Values.recovery.method "import" }}
  - name: importSource
@@ -15,7 +15,7 @@ externalClusters:
        barmanObjectName: "{{ include "cluster.name" . }}-recovery"
        serverName: {{ include "cluster.recoveryServerName" . }}
  {{- end }}
-{{- else }}
+{{- else -}}
  {{ fail "Invalid cluster mode!" }}
-{{- end }}
-{{ end }}
+{{- end -}}
+{{- end -}}
@@ -30,4 +30,4 @@
    name: {{ $config.sslRootCertSecret.name }}
    key: {{ $config.sslRootCertSecret.key }}
  {{- end }}
-{{- end }}
+{{- end -}}
@@ -35,7 +35,7 @@ spec:
  {{- with .Values.cluster.resources }}
  resources:
    {{- toYaml . | nindent 4 }}
-  {{ end }}
+  {{- end }}
  {{- with .Values.cluster.affinity }}
  affinity:
    {{- toYaml . | nindent 4 }}
@@ -43,7 +43,6 @@ spec:
  {{- if .Values.cluster.priorityClassName }}
  priorityClassName: {{ .Values.cluster.priorityClassName }}
  {{- end }}
-
  primaryUpdateMethod: {{ .Values.cluster.primaryUpdateMethod }}
  primaryUpdateStrategy: {{ .Values.cluster.primaryUpdateStrategy }}
  logLevel: {{ .Values.cluster.logLevel }}
@@ -57,7 +56,6 @@ spec:
    name: {{ . }}
  {{ end }}
  enablePDB: {{ .Values.cluster.enablePDB }}
-
  postgresql:
    {{- if .Values.cluster.postgresql.shared_preload_libraries }}
    shared_preload_libraries:
@@ -85,7 +83,6 @@ spec:
    parameters:
      {{- toYaml . | nindent 6 }}
    {{- end }}
-
  {{- if not (and (empty .Values.cluster.roles) (empty .Values.cluster.services)) }}
  managed:
    {{- with .Values.cluster.services }}
@@ -97,14 +94,12 @@ spec:
      {{- toYaml . | nindent 6 }}
    {{ end }}
  {{- end }}
-
  {{- with .Values.cluster.serviceAccountTemplate }}
  serviceAccountTemplate:
    {{- toYaml . | nindent 4 }}
  {{- end }}
-
  monitoring:
-    enablePodMonitor: {{ and .Values.cluster.monitoring.enabled .Values.cluster.monitoring.podMonitor.enabled }}
+    enablePodMonitor: false
    disableDefaultQueries: {{ .Values.cluster.monitoring.disableDefaultQueries }}
    {{- if not (empty .Values.cluster.monitoring.customQueries) }}
    customQueriesConfigMap:
@@ -127,9 +122,9 @@ spec:
    {{- with .Values.cluster.monitoring.podMonitor.metricRelabelings }}
    podMonitorMetricRelabelings:
      {{- toYaml . | nindent 6 }}
-    {{ end }}
    {{- end }}
-
+    {{- end }}
+  {{- if not (empty .Values.backup.objectStore) }}
  plugins:
  {{- range $objectStore := .Values.backup.objectStore }}
    - name: barman-cloud.cloudnative-pg.io
@@ -146,7 +141,7 @@ spec:
        {{- else }}
        serverName: "{{ include "cluster.name" $ }}-backup-{{ $objectStore.index }}"
        {{- end }}
-  {{- end }}
-
-  {{ include "cluster.bootstrap" . | nindent 2 }}
-  {{ include "cluster.externalClusters" . | nindent 2 }}
+  {{- end -}}
+  {{- end -}}
+  {{- include "cluster.bootstrap" . | nindent 2 -}}
+  {{- include "cluster.externalClusters" . | nindent 2 -}}
@@ -1,6 +1,6 @@
-{{ if and (eq .Values.backup.method "objectStore") (.Values.backup.externalSecret.enabled) }}
-{{ $context := . -}}
-{{ range .Values.backup.objectStore -}}
+{{- if and (eq .Values.backup.method "objectStore") (.Values.backup.externalSecret.enabled) }}
+{{- $context := . }}
+{{- range .Values.backup.objectStore }}
 ---
 apiVersion: external-secrets.io/v1
 kind: ExternalSecret
@@ -30,8 +30,8 @@ spec:
      remoteRef:
        key: {{ .externalSecretCredentialPath| required "External Secret Credential local path is required" }}
        property: ACCESS_SECRET_KEY
-{{ end -}}
-{{ end }}
+{{- end }}
+{{- end }}

 {{- if and (eq .Values.recovery.method "objectStore") (.Values.recovery.objectStore.externalSecret.enabled) }}
 ---
@@ -1,6 +1,6 @@
-{{ if (eq .Values.backup.method "objectStore") }}
-{{ $context := . -}}
-{{ range .Values.backup.objectStore -}}
+{{- if (eq .Values.backup.method "objectStore") }}
+{{- $context := . }}
+{{- range .Values.backup.objectStore }}
 ---
 apiVersion: barmancloud.cnpg.io/v1
 kind: ObjectStore
@@ -57,10 +57,9 @@ spec:
      region:
        name: {{ include "cluster.backupSecretName" (dict "instance" . "global" $context) }}
        key: ACCESS_REGION
-{{ end -}}
-{{ end }}
-
-{{ if eq .Values.recovery.method "objectStore" }}
+{{- end }}
+{{- end }}
+{{- if eq .Values.recovery.method "objectStore" }}
 ---
 apiVersion: barmancloud.cnpg.io/v1
 kind: ObjectStore
@@ -104,4 +103,4 @@ spec:
      region:
        name: {{ include "cluster.recoverySecretName" . }}
        key: ACCESS_REGION
-{{ end }}
+{{- end }}
@@ -0,0 +1,18 @@
+{{- if and .Values.cluster.monitoring.enabled .Values.cluster.monitoring.podMonitor.enabled }}
+---
+apiVersion: monitoring.coreos.com/v1
+kind: PodMonitor
+metadata:
+  name: {{ include "cluster.name" $ }}-cluster
+  namespace: {{ include "cluster.namespace" $ }}
+  labels:
+    app.kubernetes.io/name: {{ include "cluster.name" $ }}-cluster
+    {{- include "cluster.labels" $ | nindent 4 }}
+spec:
+  selector:
+    matchLabels:
+      cnpg.io/cluster: {{ include "cluster.name" $ }}-cluster
+      cnpg.io/podRole: instance
+  podMetricsEndpoints:
+    - port: metrics
+{{- end }}
@@ -47,6 +47,6 @@ spec:
  {{- end }}
  {{- with .template }}
  template:
-    {{- . | toYaml | nindent 4 }}
+    {{ . | toYaml | nindent 4 }}
  {{- end }}
 {{- end }}
@@ -1,4 +1,5 @@
-{{- if and .Values.cluster.monitoring.enabled .Values.cluster.monitoring.prometheusRule.enabled -}}
+{{- if and .Values.cluster.monitoring.enabled .Values.cluster.monitoring.prometheusRule.enabled }}
+---
 apiVersion: monitoring.coreos.com/v1
 kind: PrometheusRule
 metadata:
@@ -25,4 +26,4 @@ spec:
        - {{ $tpl }}
        {{- end -}}
        {{- end }}
-{{ end }}
+{{- end }}
@@ -1,5 +1,5 @@
-{{ $context := . -}}
-{{ range .Values.backup.scheduledBackups -}}
+{{- $context := . }}
+{{- range .Values.backup.scheduledBackups }}
 ---
 apiVersion: postgresql.cnpg.io/v1
 kind: ScheduledBackup
@@ -21,4 +21,4 @@ spec:
    name: {{ .plugin | default "barman-cloud.cloudnative-pg.io" }}
    parameters:
      barmanObjectName: "{{ include "cluster.name" $context }}-backup-{{ .backupName }}"
-{{ end -}}
+{{- end }}
@@ -23,7 +23,7 @@ cluster:
  # -- Default image
  image:
    repository: ghcr.io/cloudnative-pg/postgresql
-    tag: 18.3-standard-trixie
+    tag: 18.4-standard-trixie

  # -- Image pull policy. One of Always, Never or IfNotPresent. If not defined, it defaults to IfNotPresent. Cannot be updated.
  # More info: https://kubernetes.io/docs/concepts/containers/images#updating-images
@@ -127,6 +127,7 @@ cluster:
      # Applied to samples before ingestion.
      metricRelabelings: []

+    # -- Prometheus rule
    prometheusRule:

      # -- Whether to enable the PrometheusRule automated alerts
@@ -164,7 +165,7 @@ cluster:

    # -- PostgreSQL configuration options (postgresql.conf)
    parameters:
-      shared_buffers: 128MB
+      shared_buffers: 512MB
      max_slot_wal_keep_size: 2000MB
      hot_standby_feedback: "on"

@@ -393,7 +394,8 @@ backup:
    enabled: true

  # -- Options for object store backups
-  objectStore:
+  objectStore: []
+
    # -
    #   # -- Object store backup name
    #   name: external
@@ -1,6 +1,6 @@
 dependencies:
 - name: common
  repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 5.0.0
-digest: sha256:153788a98eab8a2e83bd456e1f6f3d53d1a3363bfe5bca07bd232d948e01a6b2
-generated: "2026-05-07T20:56:33.260732-05:00"
+  version: 5.0.1
+digest: sha256:754f21ee6fca6dc4a85e91384ff0b919b715234d764ef344bd3bbe93414275d3
+generated: "2026-05-17T20:56:33.77714-05:00"
@@ -1,6 +1,6 @@
 apiVersion: v2
 name: rclone-bucket
-version: 0.10.0
+version: 0.11.4
 description: Rclone CronJob to replicate buckets
 keywords:
  - rclone-bucket
@@ -14,7 +14,7 @@ maintainers:
 dependencies:
  - name: common
    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 5.0.0
+    version: 5.0.1
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/rclone.png
 # renovate: datasource=github-releases depName=rclone/rclone
-appVersion: v1.74.0
+appVersion: v1.74.1
@@ -1,6 +1,6 @@
 # rclone-bucket

-![Version: 0.10.0](https://img.shields.io/badge/Version-0.10.0-informational?style=flat-square) ![AppVersion: v1.74.0](https://img.shields.io/badge/AppVersion-v1.74.0-informational?style=flat-square)
+![Version: 0.11.4](https://img.shields.io/badge/Version-0.11.4-informational?style=flat-square) ![AppVersion: v1.74.1](https://img.shields.io/badge/AppVersion-v1.74.1-informational?style=flat-square)

 Rclone CronJob to replicate buckets

@@ -19,7 +19,7 @@ Rclone CronJob to replicate buckets

 | Repository | Name | Version |
 |------------|------|---------|
-| https://bjw-s-labs.github.io/helm-charts/ | common | 5.0.0 |
+| https://bjw-s-labs.github.io/helm-charts/ | common | 5.0.1 |

 ## Values

@@ -27,9 +27,10 @@ Rclone CronJob to replicate buckets
 |-----|------|---------|-------------|
 | additionalLabels | object | `{}` | Add additional labels |
 | cronJob | object | `{"backoffLimit":3,"parallelism":1,"schedule":"0 0 * * *","suspend":false,"timeZone":"America/Chicago"}` | CronJob configuration |
-| image | object | `{"pullPolicy":"IfNotPresent","repository":"rclone/rclone","tag":"1.74.0@sha256:d2e0e88359d0b2e67cfcd2c43d5405185eb8adfc207079df27c42da82c5207bc"}` | Default image |
+| image | object | `{"pullPolicy":"IfNotPresent","repository":"rclone/rclone","tag":"1.74.1@sha256:eb8788b795f0009324e9572b0e2acb9b56885327c2746b07d67a9d3b893a6602"}` | Default image |
 | metrics | object | `{"enabled":true}` | Metrics |
 | nameOverride | string | `""` | Default pattern follows <pvcTarget>-backup |
+| prometheusRule | object | `{"enabled":true}` | Prometheus Rule |
 | prune | object | `{"ageToPrune":"90d","enabled":false,"exclude":"","include":""}` | Enable prune job |
 | rclone | object | `{"destination":{"bucketName":"bucket","forcePathStyle":true,"providerType":"Other"},"providerType":"Other","source":{"bucketName":"bucket","forcePathStyle":true,"providerType":"Other"}}` | rclone configuration |
 | rclone.destination | object | `{"bucketName":"bucket","forcePathStyle":true,"providerType":"Other"}` | Destination configuration |
@@ -62,16 +62,16 @@ DEST_ENDPOINT
 {{/*
 Create chart name and version as used by the chart label.
 */}}
-{{- define "secretRclone.chart" -}}
+{{- define "rclone.chart" -}}
  {{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" }}
 {{- end }}

 {{/*
 Common labels
 */}}
-{{- define "secretRclone.labels" -}}
-helm.sh/chart: {{ include "secretRclone.chart" $ }}
-{{ include "secretRclone.selectorLabels" $ }}
+{{- define "rclone.labels" -}}
+helm.sh/chart: {{ include "rclone.chart" $ }}
+{{ include "rclone.selectorLabels" $ }}
 {{- if .Chart.AppVersion }}
 app.kubernetes.io/version: {{ .Chart.Version | quote }}
 {{- end }}
@@ -84,7 +84,7 @@ app.kubernetes.io/managed-by: {{ .Release.Service }}
 {{/*
 Selector labels
 */}}
-{{- define "secretRclone.selectorLabels" -}}
+{{- define "rclone.selectorLabels" -}}
 app.kubernetes.io/instance: {{ .Release.Name }}
 app.kubernetes.io/part-of: {{ .Release.Name }}
 {{- end }}
@@ -39,8 +39,9 @@ controllers:
          {{- end }}
          {{- if .Values.metrics.enabled }}
          - --rc
+          - --rc-addr=0.0.0.0:5572
          - --rc-enable-metrics
-          - --metrics-addr=0.0.0.0:5573
+          - --rc-no-auth
          {{- end }}
          - --verbose
        env:
@@ -116,8 +117,9 @@ controllers:
          - --verbose
          {{- if .Values.metrics.enabled }}
          - --rc
+          - --rc-addr=0.0.0.0:5573
          - --rc-enable-metrics
-          - --metrics-addr=0.0.0.0:5574
+          - --rc-no-auth
          {{- end }}
        env:
          - name: RCLONE_CONFIG_DEST_TYPE
@@ -154,15 +156,12 @@ service:
  main:
    controller: main
    ports:
-      rc:
+      rc-sync:
        port: 5572
        targetPort: 5572
-      metrics-sync:
+      rc-prune:
        port: 5573
        targetPort: 5573
-      metrics-prune:
-        port: 5574
-        targetPort: 5574
 serviceMonitor:
  main:
    selector:
@@ -171,11 +170,11 @@ serviceMonitor:
        app.kubernetes.io/instance: {{ .Release.Namespace }}
    serviceName: '{{ include "bjw-s.common.lib.chart.names.fullname" $ }}'
    endpoints:
-      - port: metrics-sync
+      - port: rc-sync
        interval: 10s
        scrapeTimeout: 5s
        path: /metrics
-      - port: metrics-prune
+      - port: rc-prune
        interval: 10s
        scrapeTimeout: 5s
        path: /metrics
@@ -6,7 +6,7 @@ metadata:
  name: {{ include "rclone.sourceSecretName" . }}
  namespace: {{ .Release.Namespace }}
  labels:
-    {{- include "secretRclone.labels" . | nindent 4 }}
+    {{- include "rclone.labels" . | nindent 4 }}
    app.kubernetes.io/name: {{ include "rclone.sourceSecretName" . }}
    {{- with .Values.additionalLabels }}
    {{- toYaml . | nindent 4 }}
@@ -40,7 +40,7 @@ metadata:
  name: {{ include "rclone.destinationSecretName" . }}
  namespace: {{ .Release.Namespace }}
  labels:
-    {{- include "secretRclone.labels" . | nindent 4 }}
+    {{- include "rclone.labels" . | nindent 4 }}
    app.kubernetes.io/name: {{ include "rclone.destinationSecretName" . }}
    {{- with .Values.additionalLabels }}
    {{- toYaml . | nindent 4 }}
@@ -0,0 +1,32 @@
+{{- if .Values.prometheusRule.enabled }}
+---
+apiVersion: monitoring.coreos.com/v1
+kind: PrometheusRule
+metadata:
+  name: {{ include "rclone.name" . }}
+  namespace: {{ .Release.Namespace }}
+  labels:
+    {{- include "rclone.labels" . | nindent 4 }}
+    app.kubernetes.io/name: {{ include "rclone.name" . }}
+    {{- with .Values.additionalLabels }}
+    {{- toYaml . | nindent 4 }}
+    {{- end }}
+spec:
+  groups:
+    - name: rclone.alerts
+      rules:
+        - alert: RclonePodFailed
+          expr: |
+            (kube_pod_container_status_last_terminated_exitcode > 0)
+            * on(pod, namespace) group_left(owner_name)
+            kube_pod_owner{owner_kind="Job", owner_name=~"rclone-.*"}
+          for: 1m
+          labels:
+            severity: critical
+          annotations:
+            summary: "Rclone Pod failed in {{ `{{ $labels.namespace }}` }}"
+            description: |
+              A pod for the Rclone sync of s3 bucket '{{ .Values.rclone.source.bucketName }}' failed with exit code {{ `{{ $value }}` }}.
+              Job: {{ `{{ $labels.owner_name }}` }}
+              Namespace: {{ `{{ $labels.namespace }}` }}
+{{- end }}
@@ -7,7 +7,7 @@ additionalLabels: {}
 # -- Default image
 image:
  repository: rclone/rclone
-  tag: 1.74.0@sha256:d2e0e88359d0b2e67cfcd2c43d5405185eb8adfc207079df27c42da82c5207bc
+  tag: 1.74.1@sha256:eb8788b795f0009324e9572b0e2acb9b56885327c2746b07d67a9d3b893a6602
  pullPolicy: IfNotPresent

 # -- CronJob configuration
@@ -86,3 +86,7 @@ secret:
 # -- Metrics
 metrics:
  enabled: true
+
+# -- Prometheus Rule
+prometheusRule:
+  enabled: true
Author	SHA1	Message	Date
renovate-bot	2abec3f022	chore(deps): update ghcr.io/cloudnative-pg/postgresql docker tag to v18.4 lint-and-test / lint-helm (pull_request) Successful in 25s Details lint-and-test / chart-testing (pull_request) Successful in 3m44s Details	2026-05-18 19:49:36 +00:00
alexlebens	d8550f04f2	fix: wrong naming lint-and-test / lint-helm (push) Successful in 12s Details release-charts-postgres-cluster / release (push) Successful in 25s Details renovate / renovate (push) Successful in 49s Details lint-and-test / chart-testing (push) Successful in 3m15s Details	2026-05-18 14:48:56 -05:00
alexlebens	bc2cfeb2a2	feat: improve template formatting lint-and-test / lint-helm (push) Successful in 13s Details lint-and-test / chart-testing (push) Successful in 25s Details release-charts-postgres-cluster / release (push) Successful in 30s Details renovate / renovate (push) Successful in 55s Details	2026-05-17 21:59:53 -05:00
alexlebens	7b9419140b	feat: update common chart release-charts-cloudflared / release (push) Successful in 53s Details release-charts-generic-device-plugin / release (push) Successful in 31s Details release-charts-rclone-bucket / release (push) Successful in 26s Details renovate / renovate (push) Successful in 34s Details lint-and-test / chart-testing (push) Successful in 4m32s Details lint-and-test / lint-helm (push) Successful in 11s Details	2026-05-17 20:56:50 -05:00
alexlebens	61467d4638	feat: increase default shared buffers lint-and-test / lint-helm (push) Successful in 59s Details release-charts-postgres-cluster / release (push) Successful in 1m16s Details renovate / renovate (push) Successful in 1m28s Details lint-and-test / chart-testing (push) Successful in 3m4s Details	2026-05-17 20:54:58 -05:00
alexlebens	c6a6668e5e	feat: change template formatting	2026-05-17 20:54:58 -05:00
alexlebens	8d095b58f9	feat: move podmonitor to template in advance of depreciation	2026-05-17 20:54:58 -05:00
renovate-bot	f5d11d2420	Merge pull request 'chore(deps): update ghcr.io/squat/generic-device-plugin:latest docker digest to dc192e1' (#209 ) from renovate/unified-squatgeneric-device-plugin into main lint-and-test / chart-testing (push) Successful in 1m12s Details lint-and-test / lint-helm (push) Successful in 31s Details release-charts-generic-device-plugin / release (push) Successful in 56s Details renovate / renovate (push) Successful in 1m51s Details	2026-05-16 00:02:19 +00:00
renovate-bot	0aa464d28a	chore(deps): update ghcr.io/squat/generic-device-plugin:latest docker digest to dc192e1 renovate/stability-days Updates have not met minimum release age requirement Details lint-and-test / chart-testing (pull_request) Successful in 1m3s Details lint-and-test / lint-helm (pull_request) Failing after 57s Details	2026-05-16 00:01:59 +00:00
alexlebens	79c8d11829	Merge pull request 'chore(deps): update dependency cloudflare/cloudflared to v2026.5.0' (#207 ) from renovate/unified-cloudflarecloudflared into main lint-and-test / lint-helm (push) Successful in 14s Details release-charts-cloudflared / release (push) Successful in 24s Details lint-and-test / chart-testing (push) Successful in 25s Details renovate / renovate (push) Successful in 1m51s Details Reviewed-on: #207	2026-05-14 01:46:24 +00:00
renovate-bot	feb39465e0	chore(deps): update dependency cloudflare/cloudflared to v2026.5.0 lint-and-test / lint-helm (pull_request) Successful in 34s Details lint-and-test / chart-testing (pull_request) Successful in 50s Details	2026-05-14 00:04:02 +00:00
renovate-bot	d4689e985c	Merge pull request 'chore(deps): update ghcr.io/squat/generic-device-plugin:latest docker digest to 327d13c' (#206 ) from renovate/unified-squatgeneric-device-plugin into main lint-and-test / lint-helm (push) Successful in 33s Details release-charts-generic-device-plugin / release (push) Successful in 44s Details renovate / renovate (push) Successful in 1m19s Details lint-and-test / chart-testing (push) Successful in 5m39s Details	2026-05-14 00:02:23 +00:00
renovate-bot	76e0dcf8e4	chore(deps): update ghcr.io/squat/generic-device-plugin:latest docker digest to 327d13c renovate/stability-days Updates have not met minimum release age requirement Details lint-and-test / lint-helm (pull_request) Failing after 41s Details lint-and-test / chart-testing (pull_request) Successful in 6m4s Details	2026-05-14 00:02:09 +00:00
renovate-bot	2a63573d24	Merge pull request 'chore(deps): update ghcr.io/squat/generic-device-plugin:latest docker digest to 7f3d4b6' (#205 ) from renovate/unified-squatgeneric-device-plugin into main lint-and-test / lint-helm (push) Successful in 31s Details release-charts-generic-device-plugin / release (push) Successful in 57s Details lint-and-test / chart-testing (push) Successful in 2m55s Details renovate / renovate (push) Successful in 2m8s Details	2026-05-12 00:02:43 +00:00
renovate-bot	92cb9cdc4f	chore(deps): update ghcr.io/squat/generic-device-plugin:latest docker digest to 7f3d4b6 renovate/stability-days Updates have not met minimum release age requirement Details lint-and-test / lint-helm (pull_request) Failing after 31s Details lint-and-test / chart-testing (pull_request) Successful in 5m12s Details	2026-05-12 00:02:30 +00:00
alexlebens	ed43f11723	fix: change ports lint-and-test / lint-helm (push) Successful in 23s Details release-charts-rclone-bucket / release (push) Successful in 23s Details lint-and-test / chart-testing (push) Successful in 59s Details renovate / renovate (push) Successful in 2m18s Details	2026-05-08 21:21:31 -05:00
alexlebens	75649b575e	fix: wrong argument lint-and-test / chart-testing (push) Successful in 22s Details lint-and-test / lint-helm (push) Successful in 25s Details release-charts-rclone-bucket / release (push) Successful in 35s Details renovate / renovate (push) Successful in 1m12s Details	2026-05-08 20:22:56 -05:00
alexlebens	2574808017	fix: overlapping ports lint-and-test / lint-helm (push) Successful in 12s Details lint-and-test / chart-testing (push) Successful in 23s Details release-charts-rclone-bucket / release (push) Successful in 22s Details renovate / renovate (push) Successful in 1m4s Details	2026-05-08 19:21:46 -05:00
alexlebens	b86adc263c	feat: release 0.11.0 lint-and-test / chart-testing (push) Successful in 25s Details release-charts-rclone-bucket / release (push) Successful in 33s Details lint-and-test / lint-helm (push) Successful in 36s Details renovate / renovate (push) Successful in 48s Details	2026-05-08 18:44:18 -05:00
alexlebens	0c3cd87d11	feat: add prometheus rule	2026-05-08 18:43:56 -05:00
alexlebens	5be7f9fb44	Merge pull request 'chore(deps): update rclone/rclone to v1.74.1' (#204 ) from renovate/unified-rclonerclone into main lint-and-test / lint-helm (push) Successful in 13s Details release-charts-rclone-bucket / release (push) Successful in 18s Details lint-and-test / chart-testing (push) Successful in 23s Details renovate / renovate (push) Successful in 47s Details Reviewed-on: #204	2026-05-08 23:20:45 +00:00
renovate-bot	db9509ca97	chore(deps): update rclone/rclone to v1.74.1 lint-and-test / lint-helm (pull_request) Successful in 14s Details lint-and-test / chart-testing (pull_request) Successful in 25s Details	2026-05-08 23:15:00 +00:00