chore(deps): update helm release cloudnative-pg to v0.29.0

[renovate]

This PR contains the following updates:

Package	Update	Change
cloudnative-pg (source)	minor	0.28.3 → 0.29.0

---

Release Notes

cloudnative-pg/charts (cloudnative-pg)

v0.29.0

Compare Source

CloudNativePG Operator Helm Chart

What's Changed

• fix: plugin-barman-cloud port for readiness probe by @​tuunit in #​776
• chore(deps): update actions/setup-python action to v6.3.0 by @​renovate[bot] in #​927
• chore(deps): update azure/setup-helm action to v5.0.1 by @​renovate[bot] in #​926
• Release cloudnative-pg-v0.29.0 by @​cnpg-bot in #​935

New Contributors

• @​tuunit made their first contribution in #​776

Full Changelog: cloudnative-pg/charts@cluster-v0.7.0...cloudnative-pg-v0.29.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Helm Template Diff

cloudnative-pg-operator — 0.28.3 → 0.29.0

850 changed lines

--- /tmp/old.yaml	2026-07-31 12:49:46.065777839 +0000
+++ /tmp/new.yaml	2026-07-31 12:49:45.121773098 +0000
@@ -6,10 +6,10 @@
   name: cloudnative-pg-operator
   namespace: cloudnative-pg
   labels:
-    helm.sh/chart: cloudnative-pg-0.28.3
+    helm.sh/chart: cloudnative-pg-0.29.0
     app.kubernetes.io/name: cloudnative-pg
     app.kubernetes.io/instance: cloudnative-pg-operator
-    app.kubernetes.io/version: "1.29.1"
+    app.kubernetes.io/version: "1.30.0"
     app.kubernetes.io/managed-by: Helm
 ---
 # Source: cloudnative-pg/templates/config.yaml
@@ -37,10 +37,10 @@
   name: cnpg-controller-manager-config
   namespace: cloudnative-pg
   labels:
-    helm.sh/chart: cloudnative-pg-0.28.3
+    helm.sh/chart: cloudnative-pg-0.29.0
     app.kubernetes.io/name: cloudnative-pg
     app.kubernetes.io/instance: cloudnative-pg-operator
-    app.kubernetes.io/version: "1.29.1"
+    app.kubernetes.io/version: "1.30.0"
     app.kubernetes.io/managed-by: Helm
 data:
   INHERITED_LABELS: custom.network/*
@@ -54,10 +54,10 @@
   name: cnpg-default-monitoring
   namespace: cloudnative-pg
   labels:
-    helm.sh/chart: cloudnative-pg-0.28.3
+    helm.sh/chart: cloudnative-pg-0.29.0
     app.kubernetes.io/name: cloudnative-pg
     app.kubernetes.io/instance: cloudnative-pg-operator
-    app.kubernetes.io/version: "1.29.1"
+    app.kubernetes.io/version: "1.30.0"
     app.kubernetes.io/managed-by: Helm
     cnpg.io/reload: ""
 data:
@@ -553,7 +553,7 @@
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.20.1
+    controller-gen.kubebuilder.io/version: v0.21.0
     helm.sh/resource-policy: keep
   name: backups.postgresql.cnpg.io
 spec:
@@ -1027,7 +1027,7 @@
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.20.1
+    controller-gen.kubebuilder.io/version: v0.21.0
     helm.sh/resource-policy: keep
   name: clusterimagecatalogs.postgresql.cnpg.io
 spec:
@@ -1071,6 +1071,35 @@
               Specification of the desired behavior of the ClusterImageCatalog.
               More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
             properties:
+              componentImages:
+                description: |-
+                  ComponentImages is a list of named images for components other than PostgreSQL
+                  (e.g. pgbouncer). Keys must be unique within a catalog.
+                items:
+                  description: CatalogComponentImage is a named image entry for a
+                    non-PostgreSQL component.
+                  properties:
+                    image:
+                      description: Image is the container image reference.
+                      type: string
+                    key:
+                      description: Key is the unique identifier for this image within
+                        the catalog.
+                      maxLength: 63
+                      pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$
+                      type: string
+                  required:
+                  - image
+                  - key
+                  type: object
+                maxItems: 32
+                type: array
+                x-kubernetes-list-map-keys:
+                - key
+                x-kubernetes-list-type: map
+                x-kubernetes-validations:
+                - message: Component image keys must be unique
+                  rule: self.all(e, self.filter(f, f.key==e.key).size() == 1)
               images:
                 description: List of CatalogImages available in the catalog
                 items:
@@ -1171,7 +1200,11 @@
                               type: string
                             type: array
                           name:
-                            description: The name of the extension, required
+                            description: |-
+                              The name of the extension, required. The limit of 59 characters
+                              leaves room for the prefix the operator adds when deriving the
+                              extension's Kubernetes Volume name (capped at 63 characters).
+                            maxLength: 59
                             minLength: 1
                             pattern: ^[a-z0-9]([-a-z0-9_]*[a-z0-9])?$
                             type: string
@@ -1216,7 +1249,7 @@
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.20.1
+    controller-gen.kubebuilder.io/version: v0.21.0
     helm.sh/resource-policy: keep
   name: clusters.postgresql.cnpg.io
 spec:
@@ -2366,10 +2399,11 @@
                             description: |-
                               Compress a backup file (a tar file per tablespace) while streaming it
                               to the object store. Available options are empty string (no
-                              compression, default), `gzip`, `bzip2`, and `snappy`.
+                              compression, default), `gzip`, `bzip2`, `lz4`, and `snappy`.
                             enum:
                             - bzip2
                             - gzip
+                            - lz4
                             - snappy
                             type: string
                           encryption:
@@ -3958,10 +3992,11 @@
                               description: |-
                                 Compress a backup file (a tar file per tablespace) while streaming it
                                 to the object store. Available options are empty string (no
-                                compression, default), `gzip`, `bzip2`, and `snappy`.
+                                compression, default), `gzip`, `bzip2`, `lz4`, and `snappy`.
                               enum:
                               - bzip2
                               - gzip
+                              - lz4
                               - snappy
                               type: string
                             encryption:
@@ -4512,6 +4547,8 @@
                           description: |-
                             List of one or more existing roles to which this role will be
                             immediately added as a new member. Default empty.
+                            Changes to the list are applied to an existing role through
+                            `GRANT` and `REVOKE` statements, not only at role creation.
                           items:
                             type: string
                           type: array
@@ -4519,7 +4556,7 @@
                           default: true
                           description: |-
                             Whether a role "inherits" the privileges of roles it is a member of.
-                            Defaults is `true`.
+                            Default is `true`.
                           type: boolean
                         login:
                           description: |-
@@ -4533,8 +4570,10 @@
                           type: string
                         passwordSecret:
                           description: |-
-                            Secret containing the password of the role (if present)
-                            If null, the password will be ignored unless DisablePassword is set
+                            Secret containing the password of the role (if present).
+                            If null, the password will be ignored unless DisablePassword is set.
+                            When set, the secret must follow the `kubernetes.io/basic-auth` format
+                            and contain both a `username` and a `password` field.
                           properties:
                             name:
                               description: Name of the referent.
@@ -5745,7 +5784,11 @@
                             type: string
                           type: array
                         name:
-                          description: The name of the extension, required
+                          description: |-
+                            The name of the extension, required. The limit of 59 characters
+                            leaves room for the prefix the operator adds when deriving the
+                            extension's Kubernetes Volume name (capped at 63 characters).
+                          maxLength: 59
                           minLength: 1
                           pattern: ^[a-z0-9]([-a-z0-9_]*[a-z0-9])?$
                           type: string
@@ -5955,6 +5998,53 @@
                         || self.standbyNamesPre.size()==0) && (!has(self.standbyNamesPost)
                         || self.standbyNamesPost.size()==0))
                 type: object
+              primaryLease:
+                description: |-
+                  Configuration of the Kubernetes `Lease` used to coordinate safe primary
+                  election within the cluster. When omitted, the operator applies built-in
+                  defaults; tune these values only if you understand the consequences for
+                  failover timing.
+                properties:
+                  leaseDurationSeconds:
+                    default: 15
... (truncated, diff exceeds 200 lines)

[lunarys]

Renovate Review: cloudnative-pg 0.28.3 → 0.29.0 (minor)

Risk: 🟡 MEDIUM

Check	Result
Inputs	✅ complete
Description vs. diff	✅ consistent
Rendered diff	⚠️ truncated (200/850 lines)
Changelog vs. config	✅ checked, no overlap

Details:

• This bumps the CNPG operator app itself a full minor version (app.kubernetes.io/version 1.29.1 → 1.30.0), and 03_apps/apps/cloudnative-pg/cloudnative-pg-operator-app.yaml sets skipCrds: false — the updated CRD schemas are actually applied here, not skipped.
• Visible portion of the diff is CRD schema additions: new componentImages catalog field, a new maxLength: 59 constraint on extension names, lz4 added to the backup compression enum, a new optional primaryLease tuning block, and doc clarifications — checked 03_apps/apps/cloudnative-pg/Chart-values.yaml/-prod/-test and none of them configure extensions: or primaryLease, so the new constraint and the new section don't collide with anything currently set.
• The changelog's "fix: plugin-barman-cloud port for readiness probe" entry is the same underlying fix already reviewed in PR chore(deps): update helm release plugin-barman-cloud to v0.7.1 #140 (the dedicated plugin-barman-cloud chart bump) — not new information here.

Why medium: rendered diff truncated at under a quarter of its size on the operator managing this repo's stateful Postgres clusters, and CRD schema changes are live (skipCrds: false) even though nothing currently configured collides with them.

---

Generated by Claude Code