RATATOSKRATATOSK
Sign in

CloudNativePG

v1.29.2Storage & Data
Jun 29, 2026

CHECK 4PLAN 1OTHER 38

A maintenance release with security fixes, stricter validation, compatibility updates for newer Kubernetes versions, and a changed PostgreSQL default. It also addresses correctness issues across cluster operations, backups, plugins, and resource handling.

Check if affected (4)

  • securitycriticalPinned search_path on pooled connections

    Applies if you use pooled connections.

    The operator now pins search_path to pg_catalog, public, pg_temp on every pooled connection. This addresses CVE-2026-55769 and GHSA-x8c2-3p4r-v9r6.

  • securityhighSCRAM-SHA-256 encoding for cleartext role passwords

    Applies if you configure cnpg.io/passwordPassthrough.

    The operator now encodes cleartext role passwords with SCRAM-SHA-256 before issuing CREATE or ALTER ROLE ... PASSWORD. This addresses CVE-2026-55765 and GHSA-w3gf-xc94-wvmj.

  • securityValidating webhook rejection and write-site checks

    Applies if you use the values that are rejected by the validating webhook.

    The validating webhook now rejects these values, and the write site checks them again.

  • breakingImmutable cluster references

    Applies if you use the cluster reference on Database, Pooler, Publication, Subscription, or ScheduledBackup resources.

    The cluster reference is now immutable on Database, Pooler, Publication, Subscription, and ScheduledBackup resources.

Plan ahead (1)

  • deprecatedNative (in-tree) Barman Cloud support removal noticeremoval planned in 1.31.0

    Applies if you use native (in-tree) Barman Cloud support.

    The deprecation notice now states that native (in-tree) Barman Cloud support will be removed in CloudNativePG 1.31.0 instead of 1.30.0.

All 38 other recorded changesfixes 31 · additions 3 · value changes 3 · constraints 1

fixes (31)

  • Fixed spec.postgresql.parameters accepting keys that are not valid PostgreSQL parameter names
  • Fixed declarative Database, Publication, and Subscription objects reporting a stale primary-side status forever after their cluster was demoted to a replica
  • Fixed non-sequential pod names (for example -1, -3) caused by the instance serial counter being advanced before the corresponding Job and PVCs were created
  • Fixed a switchover deadlock when a WAL-archiver plugin was enabled on an existing cluster
  • Fixed a cluster staying in Setting up primary indefinitely when the instance-creation Job exhausted its backoff limit
  • Fixed deletion of a Database, Publication, or Subscription getting stuck in Terminating on a replica cluster
  • Fixed a conflicting duplicate Database or Subscription with a delete reclaim policy dropping the PostgreSQL object owned by the surviving CR
  • Fixed the postgres superuser being left locked out after superuser access was disabled and then re-enabled
  • Fixed backups getting stuck in the started phase when the instance manager running them was restarted
  • Fixed exec/attach streaming to negotiate WebSocket with a SPDY fallback
  • Fixed resource leaks when concurrent Backup objects raced
  • Fixed role reconciliation clearing the password on a PostgreSQL role when the referenced Secret could not be fetched
  • Fixed a bootstrap failure where a metrics-exporter setup error
  • Fixed a ScheduledBackup controller loop that occurred when a Backup was created but its status patch never landed
  • Fixed a nil-pointer panic when reconciling a Pooler whose Cluster has been deleted.
  • Fixed bootstrap log handling so that all named log pipes (postgres, postgres.csv, and postgres.json) get consumers
  • Fixed generation of invalid IPv6 URLs by wrapping the address in square brackets.
  • Fixed an external cluster plugin still being treated as active when its configuration set enabled: false.
  • Fixed a race during bootstrap recovery from an object store where the restore job could read a stale Cluster
  • Fixed a cache race during cluster creation when the server and client CA resolve to the same Secret
  • Fixed the pg_basebackup bootstrap path overwriting or failing on a pre-existing PGDATA
  • Fixed the Cluster phase flapping between Healthy and a plugin-failure phase
  • Fixed stale certificate data and partial reads after an external server's Secret was rotated
  • Fixed plugin connectivity to use the plugin Service FQDN instead of its short name
  • Fixed a first-primary bootstrap deadlock where a status-patch conflict after the data PVC was created but before the initialization Job was started
  • Fixed a backup getting stuck in pending forever
  • Fixed a declarative VolumeSnapshot backup being permanently marked as failed
  • Fixed a volume snapshot backup being discarded on a transient instance-manager connection error
  • Fixed a replica switchover losing its status.demotionToken
  • Fixed kubectl cnpg psql on Windows
  • Fixed an unbounded memory leak in kubectl cnpg logs -f on busy clusters

additions (3)

  • Enabled pg_upgrade in-place major upgrades to PostgreSQL 19 or later for clusters that use Image Volume extensions
  • Added a label selector to the Cluster scale subresource (status.selector)
  • The operator now emits a Warning PrimaryStatusCheckFailed event on the Cluster

value changes (3)

  • The operator now reloads a CNPG-i plugin automatically when its pods are rolled
  • Updated the default PostgreSQL version to 18.4.
  • Fixed excessive operator log noise from the per-request Cluster create/update validation webhook messages, now logged at debug instead of info.

constraints (1)

  • Added support for Kubernetes 1.36.
Add CloudNativePG to your stack

A weekly email arrives when a release needs action. Like the security patches and breaking changes in this release.

Add to stack →
Official release note ↗All CloudNativePG releases →