Revisions 1090, 1091

A new revision of Charmed PostgreSQL VM has been published in the 14/stable channel on Charmhub.

System requirements | How to upgrade

Compatibility

Architecture	Charm revision	Snap version	PostgreSQL version	Recommended Juju version
amd64	1090	281	14.22	3.6.21
arm64	1091	280	14.22	3.6.21

Features

• [DPE-9455] Bump PostgreSQL to 14.22 by @taurus-forever in #1508
• Bump snap to the latest security fixes by @taurus-forever in #1610
• [DPE-8932] Expose config parameters for pg_stat_statements by @dragomirp in #1520
• [DPE-9443] Switch to Ops tracing by @dragomirp in #1470

Bug fixes

• [DPE-8900] fix: harden pg_hba replication rules and ensure dynamic IP updates by @marceloneppel in #1506
• [DPE-9578] Check unit's host for restart need by @dragomirp in #1537
• [DPE-9706] Filter out users with no database by @dragomirp in #1555
• Bump snap to the latest security fixes by @taurus-forever in #1610
• [DPE-9443] Otel distribution cleanup by @dragomirp in #1532

Note on COS Otelcol and grafana-agent

Charmed PostgreSQL is currently incompatible with the COS Otelcol (opentelemetry-collector) subordinate charm. The current recommended and tested way of integrating with PostgreSQL with COS is via the grafana-agent charm.

In this release, the Data team attempted to add Otelcol compatibility (see PR #1484), but this change broke compatibility with the grafana-agent charm. For more information about the incompatibility, see this thread.

We reverted this change in PR #1607 to maintain compatibility with grafana-agent, and are working on making PostgreSQL compatible with both opentelemetry-collector and grafana-agent in a future stable release.

Full Changelog: rev1044...rev1090

Revisions 1044, 1045

A new revision of Charmed PostgreSQL VM has been published in the 14/stable channel on Charmhub.

System requirements | How to upgrade

Compatibility

Architecture	Charm revision	Snap version	PostgreSQL version	Min. recommended Juju version
amd64	1045	247	14.20	3.6.14+
arm64	1044	246	14.20	3.6.14+

Features

• [DPE-8932] Strict mode configuration by @dragomirp in #1395
• Multiple Patroni primaries alert by @Deezzir in #1459
• Speedup charm by parallel Patroni cluster call by @dragomirp in #1339
• Add optional flags to provides endpoints for PG14 VM by @taurus-forever in #1436

Bug fixes

• [DPE-9157] Patch shared buffers by @dragomirp in #1373
• [DPE-9150] Use socket for local connections by @dragomirp in #1364
• [MISC] Wait for TLS enablement before trying to restart by @dragomirp in #1392
• [DPE-8974] Handle certificate expiration by @dragomirp in #1394
• Add new stable releases to releases.md (14) by @a-velasco in #1406
• [DPE-9158] Limit repo listing to find the timelines by @dragomirp in #1404
• [DPE-9370] Handle retry error in bulk update by @dragomirp in #1426
• [DPE-9745] Check if bucket key is present by @dragomirp in #1465
• [DPE-5263] chore: bump charmed-postgresql snap revisions by @marceloneppel in #1471
• Revert COS agent lib (14/edge) by @dragomirp in #1474

Full Changelog: rev986...rev1044

Revisions 1046, 1047

A new revision of Charmed PostgreSQL VM has been published in the 16/stable channel on Charmhub.

System requirements | How to upgrade

Compatibility

Architecture	Charm revision	Snap version	PostgreSQL version	Min. recommended Juju version
amd64	1047	244	16.11	3.6.14+
arm64	1046	242	16.11	3.6.14+

Features

• Add multiple Patroni primaries alert by @Deezzir in #1460
• [DPE-8932] Strict mode configuration by @dragomirp in #1389
• [DPE-8980] Support Juju 4 (use '--force' to deploy) by @taurus-forever in #1318
• Add docs about custom usernames by @a-velasco in #1409
• Add optional flags to provides endpoints for PG16 VM by @taurus-forever in #1435

Bug fixes

• [DPE-9157] Patch shared buffers by @taurus-forever in #1374
• [DPE-9250] remove credentials on relation broken by @dragomirp in #1380
• [DPE-9158] Limit repo listing to find the timelines by @dragomirp in #1403
• [DPE-8900] Fix CIDR mask for self_ip (peer_ip in pg_hba) by @taurus-forever in #1424
• [DPE-9370] Handle retry error in bulk update by @dragomirp in #1427
• [DPE-9745] Check if bucket key is present by @dragomirp in #1462
• Revert COS agent lib (16/edge) by @dragomirp in #1472
• Revert fbfd2e8: DPE-9050 Give a try for Juju to 3.6.13 by @taurus-forever in #1381
• Update password management docs with Juju secrets (16) by @a-velasco in #1379

Full Changelog: v16/1.165.0...v16/1.206.0

Revisions 989, 990

A new revision of Charmed PostgreSQL VM has been published in the 16/stable channel on Charmhub.

This release upgrades the PostgreSQL version to 16.11.

System requirements | How to upgrade

Compatibility

Architecture	Charm revision	Snap version	PostgreSQL version	Min. recommended Juju version
amd64	990	244	16.11	3.6.1+
arm64	989	242	16.11	3.6.1+

Highlights

• [DPE-9018] Bumped PostgreSQL to 16.11 by @taurus-forever in #1332
  • Check the official PostgreSQL 16.11 release notes
• [DPE-8860] New charm configs for worker process and WAL compression by @onkolahmet in #1284
• [DPE-7302] Ability to request database access by prefix by @dragomirp in #1238

Features

• [DPE-8987] Updated Juju Terraform Provider to 1.0.0 by @marceloneppel in #1319

Bug fixes

• [DPE-8615] Wait for storage to become available by @dragomirp in #1278
• [DPE-8975] Move PG16 VM TLS tests to 1/stable by @taurus-forever in #1314
• [DPE-9050 ] Temporary pin Juju to 3.6.11 by @taurus-forever in #1337
• [DPE-8865] Extract error messages by @marceloneppel in #1320
• [DPE-8747] Add integration test for persistent temp tablespace handling by @marceloneppel in #1347
• [DPE-9150] Use socket for local connections by @dragomirp in #1363
• Docs: fix db name in tutorial by @reneradoi in #1275
• Switch to config hash and pin last known working jammy image by @dragomirp in #1316
• Lock file maintenance Python dependencies (16/edge) by @renovate[bot] in #1326
• Update dependency uv to v0.9.14 (16/edge) by @renovate[bot] in #1324
• Use - instead of _ in error message by @carlcsaposs-canonical in #1340

Full Changelog: v16/1.135.0...v16/1.165.0

Revisions 986, 987

A new revision of Charmed PostgreSQL VM has been published in the 14/stable channel on Charmhub.

This release upgrades the PostgreSQL version to 14.20.

System requirements | How to upgrade

Compatibility

Architecture	Charm revision	Snap version	PostgreSQL version	Min. recommended Juju version
amd64	987	245	14.20	3.6.1+
arm64	986	243	14.20	3.6.1+

Highlights

• [DPE-9018] Bumped PostgreSQL version to 14.20 by @taurus-forever in #1331
  • Check the official PostgreSQL 14.20 release notes
• [DPE-8948] Added worker process and WAL compression configuration options by @onkolahmet in #1344
• [DPE-3589] PgBackrest Dashboard and improved alert rules by @Deezzir in #1191

Bug fixes

• [DPE-9001] Dynamic TLS flag in the Patroni helper by @dragomirp in #1362
• [DPE-8573] Cache _patroni property by @dragomirp in #1249
• [DPE-8550] Check juju version before removing revision by @dragomirp in #1214
• [DPE-8615] Wait for storage to become available by @dragomirp in #1277
• [DPE-8975] Move PG14 VM TLS tests to 1/stable by @taurus-forever in #1313
• [DPE-6762] Catch archive command timeout by @marceloneppel in #1328
• Update charmcraft.yaml build tools (main) by @renovate[bot] in #1322
• Lock file maintenance Python dependencies (main) by @renovate[bot] in #1323

New Contributors

• @Deezzir made their first contribution in #1191

Full Changelog: rev935...rev986

Revisions 951, 952

A new revision of Charmed PostgreSQL VM has been published in the 16/stable channel on Charmhub.

This release upgrades the PostgreSQL version to 16.10.

System requirements | How to upgrade

Compatibility

Architecture	Charm revision	Snap version	PostgreSQL version	Minimum Juju version
amd64	952	239	16.10	3.6.1+
arm64	951	240	16.10	3.6.1+

Highlights

• [DPE-8296] Bump PostgreSQL to 16.10 by @taurus-forever in #1150
  • Check the official PostgreSQL 16.10 release notes
• [DPE-8550] Remove old Juju Secrets revision in Juju 3.6.11+ by @dragomirp in #1215
• [DPE-8470] Bump Patroni from 3.2.2 to 3.3.8 by @taurus-forever in #1198
  • Enable Patroni strict sync mode by @dragomirp in #1199

Features

• [DPE-7379] Implement custom username by @dragomirp in #1100
• Increase max_replication_slots and max_wal_senders to 25 by @taurus-forever in #1037
• [DPE-7594] Sync up pg_hba changes and remove trigger by @dragomirp in #1051
• [DPE-6902] Replace md5 with scram-sha-256 in patroni/pg_hba.conf by @taurus-forever in #1004
• [DPE-7706] Update PostgreSQL TF module by @taurus-forever in #1052
• Change config options to dashes & update charm-refresh to v3.1.0.0 by @carlcsaposs-canonical in #1097
• Remove psql setpriv shim and switch stable upgrade tests to 16/stable by @dragomirp in #1041
• Reuse class PostgreSQL on each self.postgresql.* call by @taurus-forever in #1030
• Port pgbackrest exporter and switch to charm libs packages by @dragomirp in #1235
• Documentation updates and improvements
  • Versions and release documentation (16) by @a-velasco in #1141
  • Major Tutorial refactor by @a-velasco in #1040
  • Update architecture page (16) by @a-velasco in #1193

Bugfixes

• [DPE-6259] pgbackrest config perms by @dragomirp in #1036
• [DPE-7968] Bump snap revision (remove python3-boto3 for CVE-2023-37920) by @taurus-forever in #1108
• [DPE-7726] Use Patroni API for is_restart_pending() (instead of SQL select from pg_settings) by @taurus-forever in #1049
• Update charm-refresh to v3.1.0.2 by @carlcsaposs-canonical in #1118
• Prevent block if the snap cannot be installed by @dragomirp in #1135
• [DPE-8005] Handle empty region by @dragomirp in #1117
• Handle invalid stanza name by @dragomirp in #1154
• [DPE-8320] Fix backups with internal certificates by @dragomirp in #1162
• [DPE-8337] Disable Patroni config to prevent possible data loss by @taurus-forever in #1174
• Documentation: quick fix to use the new c lient-certificates relation by @nobuto-m in #1227
• [DPE-8550] Revision removal version check 16 by @dragomirp in #1215

New contributors

• @nobuto-m made their first contribution in #1227

Full Changelog: v16/1.59.0...v16/1.134.0

Revisions 935, 936 in 14/stable

A new revision of Charmed PostgreSQL VM has been published in the 14/stable channel on Charmhub.

This release upgrades the PostgreSQL version to 14.19, and introduces several security and stability improvements.

System requirements | How to upgrade

Compatibility

Architecture	Charm revision	Snap version	PostgreSQL version	Minimum Juju version
amd64	936	229	14.19	3.6.1+
arm64	935	230	14.19	3.6.1+

Features

• [DPE-8296] Updated PostgreSQL from 14.15 to 14.19 (#1147)
  • Check the official PostgreSQL 14.16, 14.17, 14.18, 14.19 release notes
• [DPE-8470] Updated Patroni to 3.3.8 (#1197)
  • Set all nodes to synchronous replicas by default (#672)
  • Enable Patroni synchronous strict mode (#1196)
  • Make scope mandatory for the promote-to-primary action (#856)
  • Prevented restarts during initial sync (#1000)
  • Removed re-initialization for delayed replication (#1168)
  • Automate raft re-initialization (disaster recovery) (#611)
• [DPE-6898] Restrict user-to-database access via pg_hba rules (#885)
• Speedup deployments by hashing configuration (#1166)
• [DPE-6345] Introduced LDAP integration (#824)
• [DPE-6678] Expand Charmed PostgreSQL configurations (#778)
  • new wal_keep_size config option (#799)
  • new max_locks_per_transaction config option (#718)
• [DPE-6555] Added read-only URIs (#783)
• [DPE-6664] Made username mandatory in the set-password action (#846)
• [DPE-7549] Added backup compression and restore max-process options (#1009)
• [DPE-6062] Allow backup --restore-to-time=latest without a backup-id (#683)
• Added conditional expose Terraform directive (#853)
• Updated versions and release documentation (#1158)
• [SECURITY] Updated dependency cryptography to v44.0.1 (#764)

Bug fixes

• [DPE-6323] Handle missing stanza output (#727)
• [DPE-6874] Poll all members in the cluster topology script (#810)
• Extended relation-user listing syntax (#868)
• [DPE-7723] Corrected architecture for revisions 429/430 in releases.md (#1046)
• [DPE-6259] Fixed pgbackrest configuration permissions (#1038)
• [DPE-7968] Bumped snap revision (removed python3-boto3 for CVE-2023-37920) (#1109)
• Prevent blocking if the snap could not be installed (#1136)
• Restore raft encryption check on upgrade (#1146)
• [DPE-8005] Handle empty region values (#1157)
• [DPE-8296] Downgraded promote.yaml to _promote_charm.yaml@v31.1.1 (#1161)
• [DPE-8337] Disabled Patroni configuration to prevent possible data loss (#1173)
• [DPE-8430][DPE-8427] Muted error message to debug level and improved creation of access roles (#1186)

New Contributors

• @Pepsiqqq made their first contribution in #778
• @izmalk made their first contribution in #827
• @swetha1654 made their first contribution in #853
• @tushar5526 made their first contribution in #1018
• @Gere321123 made their first contribution in #1033

Full Changelog: rev552...rev935

Revisions 843, 844 in 16/stable

The first stable revision of Charmed PostgreSQL 16 for VM has been released in the 16/stable channel on Charmhub. Besides a major workload upgrade from PostgreSQL 14.15 to 16.9, this release comes with several new features and improvements.

Thank you to everybody who helped make this release happen! 🧑‍🤝‍🧑

Charmhub | Deployment guides | System requirements

Features

• Workload upgrade from PostgreSQL 14 to 16
  • [DPE-5833] New PostgreSQL 16 charm by @lucasgameiroborges in #680
    • [DPE-5833] Update Charmed Postgresql snap to 16.9 by @dragomirp in #791
• [DPE-6965] Juju storage pools for flexible storage configuration options by @marceloneppel in #852
  • See: How to deploy on Juju storage
• [DPE-6904] Enhanced networking capabilities for complex deployment scenarios with Juju spaces by @paulomach in #857
  • See: How to deploy on Juju spaces
• [DPE-6189] Password management with Juju user secrets by @reneradoi in #833
  • See: How to manage passwords
• New in-place upgrades & rollbacks using fresh refresh v3 library by @carlcsaposs-canonical in #866
• [DPE-7309][DPE-7326] Switch to TLS v4 library by @dragomirp in #909
  * New endpoints client-certificates and peer-certificates
  * Endpoint peer-interfaces uses TLS by default
  * See all endpoints on Charmhub
• Several improvements to built-in roles
  * [DPE-7499] Remove admin and postgres roles by @marceloneppel in #931
  * Predefined roles compatibility by @marceloneppel in #960
  • [DPE-7498] Create new DB charmed_* roles by @marceloneppel in #932
  • See documentation: Roles
• New documentation site versioned on GitHub with search functionality and dark mode
• [DPE-6678] PostgreSQL config improvement by @Pepsiqqq in #778
• [DPE-7614] Remove replica re-initialisations by @dragomirp in #999
• [DPE-7549] Speed up backups restore by @dragomirp in #983
• Speed up (parallel) patroni calls by @dragomirp in #925
• [DPE-6555] Add read only URIs to data-integrator by @dragomirp in #783
• Protect the default scope in promote action by @dragomirp in #855
• [DPE-7691] Migrate snap from snap_daemon to daemon (584792) by @taurus-forever in #1024
• Update dependency cryptography to v44.0.1 [SECURITY] by @renovate[bot] in #764

Breaking changes

• Deprecated legacy interface psql - Endpoints db and db-admin are no longer supported
  • See: Interfaces and endpoints
• Support for Juju < v3.6 removed
  • Charmed PostgreSQL 16 requires Juju 3.6+ LTS due to Juju secrets support
• Juju actions get-password and set-password removed
  • Replaced by Juju secrets for enhanced security
• Timescale Apache 2 edition replaced by Timescale Community edition
• Charm action set-tls-private-key removed
  • Will be re-introduced as Juju user secrets in future releases
• Charm actions renamed for consistency with juju refresh terminology
  • pre-upgrade-check → pre-refresh-check
  • resume-upgrade → resume-refresh
• **Charm endpoint certificates split into separate endpoints
  • client-certificates - For client certificate management
  • peer-certificates - For peer-to-peer certificate management

Bug fixes

• [DPE-7678] Enable disable extensions after restore by @dragomirp in #1025
• [DPE-6815] Disable pgaudit during extensions changes by @dragomirp in #840
• [DPE-6662] Fix pgbackrest logs names on logs rotation by @taurus-forever in #939
• [DPE-6323] Handle missing stanza output by @dragomirp in #727
• [DPE-7614] Don't restart during initial sync by @dragomirp in #994
• Update charm-refresh to v3.0.0.3 by @carlcsaposs-canonical in #1008
• [DPE-7678] Recreate predefined roles by @dragomirp in #1017
• Use test app beta for isolated test by @dragomirp in #1032
• Fix charm refresh compatibility version tag during build by @carlcsaposs-canonical in #892
• Update charm-refresh-build-version to fix charm refresh version by @carlcsaposs-canonical in #894

Compatibility

Charmed PostgreSQL 16 is built for Noble (Ubuntu 24.04), and supports arm64 and amd64.

Charmhub revision (amd, arm)	Snap revision (amd, arm)	PostgreSQL version	Minimum Juju version*
843, 844	218, 219	16.9	3.6

* We recommend always using the latest Juju LTE version when possible.

Upgrading from 14 to 16

We currently do not support in-place upgrades from PostgreSQL 14 to 16, but we are developing a guide with instructions on how to perform this upgrade manually.

In the meantime, contact us if you have any questions or support needs.

New contributors

We have 15 new contributors to Charmed PostgreSQL codebase! 🏆

• @paulomach made their first contribution in #13
• @rwcarlsen made their first contribution in #29
• @carlcsaposs-canonical made their first contribution in #69
• @deusebio made their first contribution in #84
• @TakoB222 made their first contribution in #251
• @juditnovak made their first contribution in #307
• @tonyandrewmeyer made their first contribution in #322
• @Zvirovyi made their first contribution in #323
• @lucasgameiroborges made their first contribution in #425
• @BalabaDmitri made their first contribution in #396
• @BON4 made their first contribution in #454
• @shayancanonical made their first contribution in #485
• @hloeung made their first contribution in #690
• @Pepsiqqq made their first contribution in #778
• @reneradoi made their first contribution in #833

Full Changelog: https://github.com/canonical/postgresql-operator/commits/v16/1.59.0

Revisions 552, 553 in 14/stable

A new revision of Charmed PostgreSQL has been published in the 14/stable channel.

See also: Releases overview page, How to perform an upgrade

What's changed

This section outlines the most important highlights, features and bug fixes in this release.

Highlights

• Upgraded PostgreSQL from v.14.12 → v.14.15 (PR #730)
  • Check the official PostgreSQL 14.13 release notes
  • Check the official PostgreSQL 14.14 release notes
  • Check the official PostgreSQL 14.15 release notes
• Added timeline management to point-in-time recovery (PITR) (PR #629) (DPE-5561)
• Added pgAudit plugin/extension (PR #612) (DPE-5248)
• Observability stack (COS) improvements
  • Polished built-in Grafana dashboard (PR #646)
  • Improved COS alert rule descriptions (PR #651) (DPE-5658)
• Added fully-featured terraform module (PR #643)

Minor features

• Several S3 stability improvements (PR #642)
• Removed patching of private ops class. (PR #617)
• Switched charm libs from tempo_k8s to tempo_coordinator_k8s and relay tracing traffic through grafana-agent (PR #640)
• Implemented more meaningful group naming for multi-group tests (PR #625)
• Ignoring alias error in case alias is already existing (PR #637)
• Stopped tracking channel for held snaps (PR #638)
• Added pgBackRest logrotate configuration (PR #645) (DPE-5601)
• Grant priviledges to non-public schemas (PR #647) (DPE-5387)
• Added tls and tls-ca fields to databag (PR #666)
• Merged update_tls_flag into update_endpoints (PR #669)
• Made tox commands resilient to white-space paths (PR #678) (DPE-6042)
• Added microceph (local backup) integration test + bump snap version (PR #633) (DPE-5386)
• Add max_locks_per_transaction config option in (PR#718) (DPE-5533)
• Split PITR backup test in AWS and GCP (PR #605) (DPE-5181)

Bug fixes

• Juju secrets resetting fix on Juju 3.6 in (PR#726) (DPE-6320) (DPE-6325)
• Fallback to trying to create bucket without LocationConstraint in (PR#690)
• Added warning logs to Patroni reinitialisation (PR #660)
• Fixed some postgresql.conf parameters for hardening (PR #621) (DPE-5512)
• Fixed lib check (PR #627)
• Allow --restore-to-time=latest without a backup-id in (PR#683)
• Clean-up duplicated Patroni config reloads in (PR#682)
• Filter out degraded read only endpoints in (PR#679) (DPE-5714)
• remove clutter from singlestat panels in cos (PR#702)
• Catch wrong parameters exception on bucket create function call (PR#701) (DPE-5713)
• Split topology script (PR#729) (DPE-6377)
• Fix typos in COS alert rules (PR#724) (DPE-6171)
• Add plugins preload libs to regular startup parameters (PR#741) (DPE-6056)

Full Changelog: rev467...rev552

Requirements

The minimum Juju version required to reliably operate all features in this release is v3.4.3.

The recommended Juju version for this charm is v3.6.1+.

See the system requirements for more details about Juju versions and other software and hardware prerequisites.

Revisions 467, 468

A new revision of Charmed PostgreSQL has been published in the 14/stable channel.

See also: Releases overview page, How to perform an upgrade

What's changed

This section outlines the most important highlights, features and bug fixes in this release.

Highlights

• Upgraded PostgreSQL from v.14.11 → v.14.12 (PR #530)
  • Check the official PostgreSQL release notes
• Added support for Point In Time Recovery (PR #391) (DPE-2582)

Minor features

• Secure Syncobj and Patroni with passwords (PR #596) (DPE-5269)
• Removed deprecated config option profile-limit-memory (PR #564) (DPE-4889)
• Added URI connection string to relations (PR #527) (DPE-2278)
• Moved URI generation to update endpoints (PR #584)
• Improve list-backups action output (PR #522) (DPE-4479)
• Show start/end time in UTC time in list-backups output (PR #551)
• Switched to constant snap locales (PR #559) (DPE-4198)

Bug fixes

• Wait for exact number of units after scale down (PR #565) (DPE-5029)
• Improved test stability by pausing Patroni in the TLS test (PR #534) (DPE-4533)
• Block charm if it detects objects dependent on disabled plugins (PR #560) (DPE-4967)
• Disabled pgBackRest service initialization (PR #530) (DPE-4345)
• Increased timeout and terminate processes that are still up (PR #514) (DPE-4532)
• Fixed GCP backup test (PR #521) (DPE-4820)
• Handled on start secret exception and remove stale test (PR #550)
• Removed block on failure to get the db version (PR #578) (DPE-3562)
• Updated unit tests after fixing GCP backup test (PR #528) (DPE-4820)
• Ported some test_self_healing CI fixes + update check for invalid extra user credentials (PR #546) (DPE-4856)
• Fixed slow bootstrap of replicas (PR #510) (DPE-4759)
• Fixed conditional password (PR #604)
• Added enforcement of Juju versions (PR #518) (DPE-4809)
• Fixed a missing case for peer to secrets translation. (PR #533)
• Updated README.md (PR #538) (DPE-4901)
• Increased test coverage (PR #505)

Full Changelog: rev429...rev467

Known limitations

• The unit action resume-upgrade randomly raises a harmless error message: terminated.
• The Sysbench charm may crash during a PostgreSQL charm refresh.
• Make sure that cluster-cluster replication is requested for the same charm/workload revisions. An automated check is planned.
• Contact us to schedule the cluster-cluster replication upgrade with you.

Requirements

The minimum Juju version required to reliably operate all features in this release is v3.4.3+.

See the system requirements for more details about Juju versions and other software and hardware prerequisites.