Skip to content

test: add test for pgbouncer configuration#163

Closed
cross-du wants to merge 4 commits intomainfrom
pgbouncer-test
Closed

test: add test for pgbouncer configuration#163
cross-du wants to merge 4 commits intomainfrom
pgbouncer-test

Conversation

@cross-du
Copy link
Copy Markdown

Description

The pgbouncer image provided by RapidFort is not configured to work with the upstream chart. This PR adds a test that proves pgbouncer does not deploy correctly, then it sets the correct environment variables and security context for pgbouncer to operate.

The enableConnectPooler var is also added to simplify deploying PGBouncer.

To reproduce the error and run the test:

  1. Set spec.enableConnectionPooler to true in postgres-minimal.yaml
  2. Deploy the unicorn flavor
  3. uds run -f tasks/test.yaml configure-pgbouncer

Related Issue

Relates to
https://github.com/defenseunicorns/mission-success/issues/586

Type of change

  • Bug fix (non-breaking change which fixes an issue)
  • New feature (non-breaking change which adds functionality)
  • Other (security config, docs update, etc)

Checklist before merging

@cross-du cross-du requested review from a team as code owners February 24, 2026 21:31
@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented Feb 24, 2026

Full scan comparison results are too large to post as a comment. Link to full results artifact: Results
Summarized results are below:

quay.io/prometheuscommunity/postgres-exporter

quay.io/prometheuscommunity/postgres-exporter v0.18.1 -> v0.19.0

New vulnerabilities: 0
Fixed vulnerabilities: 23
Existing vulnerabilities: 5


ghcr.io/zalando/postgres-operator

ghcr.io/zalando/postgres-operator v1.15.1 -> v1.15.1

New vulnerabilities: 0
Fixed vulnerabilities: 0
Existing vulnerabilities: 40


ghcr.io/zalando/postgres-operator/logical-backup

ghcr.io/zalando/postgres-operator/logical-backup v1.15.1 -> v1.15.1

New vulnerabilities: 0
Fixed vulnerabilities: 0
Existing vulnerabilities: 294


ghcr.io/cloudnative-pg/pgbouncer

ghcr.io/cloudnative-pg/pgbouncer 1.24.1-23 -> 1.24.1-23

New vulnerabilities: 0
Fixed vulnerabilities: 0
Existing vulnerabilities: 211


ghcr.io/zalando/spilo-17

ghcr.io/zalando/spilo-17 4.0-p3 -> 4.0-p3

New vulnerabilities: 4
Fixed vulnerabilities: 3
Existing vulnerabilities: 341


quay.io/rfcurated/zalando/postgres-operator

quay.io/rfcurated/zalando/postgres-operator 1.15-jammy-scratch-fips-rfcurated -> 1.15-jammy-scratch-fips-rfcurated

New vulnerabilities: 0
Fixed vulnerabilities: 8
Existing vulnerabilities: 8


quay.io/rfcurated/zalando/postgres-operator/logical-backup

quay.io/rfcurated/zalando/postgres-operator/logical-backup 1.15-jammy-scratch-fips-rfcurated -> 1.15-jammy-scratch-fips-rfcurated

New vulnerabilities: 0
Fixed vulnerabilities: 10
Existing vulnerabilities: 5


quay.io/rfcurated/pgbouncer

quay.io/rfcurated/pgbouncer 1.25.1-jammy-fips-rfcurated -> 1.25.1-jammy-fips-rfcurated

New vulnerabilities: 0
Fixed vulnerabilities: 0
Existing vulnerabilities: 1


quay.io/rfcurated/zalando/spilo-17

quay.io/rfcurated/zalando/spilo-17 4.0-p3-jammy-fips-rfcurated -> 4.0-p3-jammy-fips-rfcurated

New vulnerabilities: 0
Fixed vulnerabilities: 8
Existing vulnerabilities: 67


quay.io/rfcurated/prometheuscommunity/postgres-exporter

quay.io/rfcurated/prometheuscommunity/postgres-exporter 0.18.1-jammy-scratch-bnt-fips-rfcurated -> 0.19-jammy-scratch-bnt-fips-rfcurated

New vulnerabilities: 0
Fixed vulnerabilities: 7
Existing vulnerabilities: 1


ghcr.io/zalando/spilo-17

ghcr.io/zalando/spilo-17 4.0-p3 -> 4.0-p3

New vulnerabilities: 4
Fixed vulnerabilities: 3
Existing vulnerabilities: 341


registry1.dso.mil/ironbank/opensource/prometheus/postgres-exporter

registry1.dso.mil/ironbank/opensource/prometheus/postgres-exporter v0.18.1 -> v0.19.0

New vulnerabilities: 0
Fixed vulnerabilities: 50
Existing vulnerabilities: 108


registry1.dso.mil/ironbank/opensource/zalando/postgres-operator

registry1.dso.mil/ironbank/opensource/zalando/postgres-operator v1.15.0 -> v1.15.0

New vulnerabilities: 0
Fixed vulnerabilities: 32
Existing vulnerabilities: 117


registry1.dso.mil/ironbank/opensource/zalando/logical-backup

registry1.dso.mil/ironbank/opensource/zalando/logical-backup v1.8.2 -> v1.15.1

New vulnerabilities: 0
Fixed vulnerabilities: 58
Existing vulnerabilities: 166


registry1.dso.mil/ironbank/opensource/zalando/pgbouncer

registry1.dso.mil/ironbank/opensource/zalando/pgbouncer 1.25.1 -> 1.25.1

New vulnerabilities: 0
Fixed vulnerabilities: 49
Existing vulnerabilities: 157



generated with uds-pk scan compare

@cross-du cross-du closed this Apr 7, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant