RATATOSKRATATOSK
Sign in

CloudNativePG

v1.29.0Storage & Data
Apr 1, 2026

ACTION 1CHECK 1PLAN 1OTHER 34

A feature-rich release adds configuration and observability capabilities, updates the default PostgreSQL image, and improves upgrade and recovery reliability. It also includes a fix for PostgreSQL role-password leakage in logs.

Action needed (1)

  • securityPostgreSQL role-password logging

    PostgreSQL no longer leaks role passwords in logs during specific reconciliation phases.

Check if affected (1)

  • breakingDefault PostgreSQL version

    Applies if you use the default PostgreSQL version.

    The default PostgreSQL version is now 18.3, using image 18.3-system-trixie.

Plan ahead (1)

  • deprecatedNative (in-tree) Barman Cloud support deprecation noticeremoval planned in 1.30.0

    Applies if you use native (in-tree) Barman Cloud support.

    The deprecation notice for native (in-tree) Barman Cloud support now states that removal is planned for CloudNativePG 1.30.0 rather than 1.29.0.

All 34 other recorded changesfixes 14 · additions 13 · constraints 4 · value changes 3

fixes (14)

  • Fixed a deadlock during operator upgrades affecting clusters using synchronous replication
  • Fixed an issue where fencing annotations could not be processed when the WAL disk was full
  • Fixed an issue where replicas would get stuck in a Pending state if the VolumeSnapshot used for the initial bootstrap had been deleted.
  • Prevented the "supervised primary" rollout strategy from consuming all available rollout slots
  • Fixed an issue where certain hot-standby parameter changes were not being correctly applied to replica clusters.
  • Fixed a bug in the CNPG-I reconciler hook that could lead to skipping subsequent plugins
  • Fixed a deadlock scenario that occurred when attempting to resize a filesystem on a PVC that was not currently attached to a Pod.
  • Fixed webhook validation of bootstrap recovery sources to accept external clusters configured with ConnectionParameters
  • Volume names for extensions and tablespaces are now prefixed to avoid naming collisions with standard cluster volumes.
  • Fixed fencing to work correctly even when the target pod does not exist.
  • Fixed the cluster and pooler service reconcilers to correctly handle changes to all spec fields when using the patch update strategy.
  • Fixed a race condition in the deprecated in-tree Barman Cloud backup implementation affecting parallel WAL restore
  • Fixed the timeline history file validation to also apply to plugin-based WAL restore.
  • The cnpg plugin now correctly propagates ImagePullSecrets to the pgbench Job pod template.

additions (13)

  • extended the ImageCatalog functionality to support PostgreSQL extensions.
  • introduced the declarative definition of podSelectorRefs to manage pg_hba.conf rules dynamically.
  • added an optional serviceAccountName field to both Cluster and Pooler specifications.
  • Improved the Pooler CRD with support for granular configuration of TLS cipher suites and minimum/maximum TLS versions.
  • emitting native Kubernetes events during key phases of the reconciliation loop
  • Added a bin_path field to the postgresql.extensions stanza, as well as in ImageCatalog and ClusterImageCatalog resources.
  • Added an env field to the postgresql.extensions stanza, as well as in ImageCatalog and ClusterImageCatalog resources.
  • Implemented a finalizer for plugins to ensure that resources managed by a plugin are gracefully cleaned up when the corresponding service is deleted.
  • Introduced a "Terminal Error" phase for backups that encounter unrecoverable issues
  • introducing reconciliationStartedAt and reconciliationTerminatedAt fields to the Backup status.
  • Added a Pending phase to the Backup status
  • added SLSA (Supply-chain Levels for Software Artifacts) provenance to release binaries and container images. Additionally, enabled Software Bill of Materials (SBOM) generation
  • the operator now reports a WaitingForHealthy condition

constraints (4)

  • Extended support for the cnpg.io/reconciliationDisabled annotation on Backup resources.
  • allow it to function even on pods that have not yet reached the Ready state
  • Kubernetes 1.35, 1.34, and 1.33
  • PostgreSQL 18, 17, 16, 15, and 14

value changes (3)

  • Improved the reliability of major upgrades by setting BackoffLimit=0 on the upgrade job, preventing unnecessary retries of a failed pg_upgrade.
  • Improved role management by verifying the instance is the primary before each reconciliation cycle
  • The operator now honors the primaryUpdateMethod when adding new PVCs to a cluster
Add CloudNativePG to your stack

A weekly email arrives when a release needs action. Like the security patches and breaking changes in this release.

Add to stack →
Official release note ↗All CloudNativePG releases →