Skip to content

Commit 496aea1

Browse files
author
Jonathan S. Katz
committed
Updates to the 4.6.2 release notes.
1 parent 9b6e8e4 commit 496aea1

File tree

1 file changed

+3
-2
lines changed

1 file changed

+3
-2
lines changed

docs/content/releases/4.6.2.md

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -5,19 +5,20 @@ draft: false
55
weight: 58
66
---
77

8-
Crunchy Data announces the release of the PostgreSQL Operator 4.6.2 on March 17, 2021.
8+
Crunchy Data announces the release of the PostgreSQL Operator 4.6.2 on March 19, 2021.
99

1010
The PostgreSQL Operator is released in conjunction with the [Crunchy Container Suite](https://github.com/CrunchyData/crunchy-containers/).
1111

1212
PostgreSQL Operator 4.6.2 release includes the following software versions upgrades:
1313

1414
- [Patroni](https://patroni.readthedocs.io/) is now at version 2.0.2.
15+
- [pgBouncer](https://www.pgbouncer.org/) for CentOS 8 / UBI 8 is rebuilt to use the libc for its async DNS backend.
1516

1617
PostgreSQL Operator is tested against Kubernetes 1.17 - 1.20, OpenShift 3.11, OpenShift 4.4+, Google Kubernetes Engine (GKE), Amazon EKS, Microsoft AKS, and VMware Enterprise PKS 1.3+, and works on other Kubernetes distributions as well.
1718

1819
## Changes
1920

20-
- The Postgres Operator and associated containers now contain defaults to use more locked down Pod and Container security context settings. These include setting `readOnlyRootFileSystem` to `true`, `allowPrivilegeEscalation` to `false`, and explicitly stating that the container should not run as `root`. Many of these were already honored, if not defaulted, within the Postgres Operator ecosystem, but these changes make the settings explicit. This is all configuration: there are no breaking changes, and these configurations can be supported down to at least the 4.2 series.
21+
- The Postgres Operator and associated containers now contain defaults to use more locked down Pod and Container security context settings. These include setting `allowPrivilegeEscalation` to `false` and explicitly stating that the container should not run as `root`. Many of these were already honored, if not defaulted, within the Postgres Operator ecosystem, but these changes make the settings explicit. This is all configuration: there are no breaking changes, and these configurations can be supported down to at least the 4.2 series.
2122
- Revert setting "UsePAM" to "yes" by default as the bug fix in Docker that required that change was applied roughly one year ago.
2223
- On Operator boot, Automatically detect when deployed in an OpenShift environment and set `DisableFSGroup` to `true`. This makes it easier to get started with the Postgres Operator in an OpenShift environment with the default security settings (i.e. `restricted`). If you use the `anyuid` Security Context Constraint, you will need to explicitly set `DisableFSGroup` to `false`.
2324

0 commit comments

Comments
 (0)