CloudNativePG

v1.29.0Storage & Data

2026년 4월 1일

설정과 관측 기능이 확장되고 PostgreSQL 기본 이미지가 변경된 릴리스입니다. 업그레이드와 복구 안정성이 개선되었으며, 비밀번호가 로그에 노출될 수 있는 보안 문제도 수정되었습니다.

조치 필요 (1)

securityPostgreSQL 로그의 역할 비밀번호 노출 방지
특정 조정 단계에서 PostgreSQL이 역할 비밀번호를 로그에 노출할 가능성을 수정했습니다.

breaking기본 PostgreSQL 버전 18.3으로 변경
기본 PostgreSQL 버전을 사용하는 경우에 적용됩니다.
기본 PostgreSQL 버전이 18.3으로 변경되었으며, 기본 이미지는 18.3-system-trixie입니다.

deprecatednative (in-tree) Barman Cloud support 지원 중단 시점 변경1.30.0에서 제거 예정
native (in-tree) Barman Cloud support를 사용하는 경우에 적용됩니다.
native (in-tree) Barman Cloud support의 지원 중단 시점이 CloudNativePG 1.29.0에서 1.30.0으로 변경되었습니다.

그 외 기록된 변경 34건 전체fixes 14 · additions 13 · constraints 4 · value changes 3

Fixed a deadlock during operator upgrades affecting clusters using synchronous replication
Fixed an issue where fencing annotations could not be processed when the WAL disk was full
Fixed an issue where replicas would get stuck in a Pending state if the VolumeSnapshot used for the initial bootstrap had been deleted.
Prevented the "supervised primary" rollout strategy from consuming all available rollout slots
Fixed an issue where certain hot-standby parameter changes were not being correctly applied to replica clusters.
Fixed a bug in the CNPG-I reconciler hook that could lead to skipping subsequent plugins
Fixed a deadlock scenario that occurred when attempting to resize a filesystem on a PVC that was not currently attached to a Pod.
Fixed webhook validation of bootstrap recovery sources to accept external clusters configured with ConnectionParameters
Volume names for extensions and tablespaces are now prefixed to avoid naming collisions with standard cluster volumes.
Fixed fencing to work correctly even when the target pod does not exist.
Fixed the cluster and pooler service reconcilers to correctly handle changes to all spec fields when using the patch update strategy.
Fixed a race condition in the deprecated in-tree Barman Cloud backup implementation affecting parallel WAL restore
Fixed the timeline history file validation to also apply to plugin-based WAL restore.
The cnpg plugin now correctly propagates ImagePullSecrets to the pgbench Job pod template.

extended the ImageCatalog functionality to support PostgreSQL extensions.
introduced the declarative definition of podSelectorRefs to manage pg_hba.conf rules dynamically.
added an optional serviceAccountName field to both Cluster and Pooler specifications.
Improved the Pooler CRD with support for granular configuration of TLS cipher suites and minimum/maximum TLS versions.
emitting native Kubernetes events during key phases of the reconciliation loop
Added a bin_path field to the postgresql.extensions stanza, as well as in ImageCatalog and ClusterImageCatalog resources.
Added an env field to the postgresql.extensions stanza, as well as in ImageCatalog and ClusterImageCatalog resources.
Implemented a finalizer for plugins to ensure that resources managed by a plugin are gracefully cleaned up when the corresponding service is deleted.
Introduced a "Terminal Error" phase for backups that encounter unrecoverable issues
introducing reconciliationStartedAt and reconciliationTerminatedAt fields to the Backup status.
Added a Pending phase to the Backup status
added SLSA (Supply-chain Levels for Software Artifacts) provenance to release binaries and container images. Additionally, enabled Software Bill of Materials (SBOM) generation
the operator now reports a WaitingForHealthy condition

Extended support for the cnpg.io/reconciliationDisabled annotation on Backup resources.
allow it to function even on pods that have not yet reached the Ready state
Kubernetes 1.35, 1.34, and 1.33
PostgreSQL 18, 17, 16, 15, and 14

Improved the reliability of major upgrades by setting BackoffLimit=0 on the upgrade job, preventing unnecessary retries of a failed pg_upgrade.
Improved role management by verifying the instance is the primary before each reconciliation cycle
The operator now honors the primaryUpdateMethod when adding new PVCs to a cluster

CloudNativePG 스택에 추가

조치가 필요한 릴리스가 나왔을 때 주간 메일로 알려드립니다. 이번 릴리스의 보안 패치와 브레이킹 체인지 같은 것들입니다.