Skip to content

fix: add cluster/finalizers update permission - #465

Merged
leonardoce merged 3 commits into
cloudnative-pg:mainfrom
GabriFedi97:fix/rbac-cluster-finalizers
Aug 14, 2025
Merged

fix: add cluster/finalizers update permission#465
leonardoce merged 3 commits into
cloudnative-pg:mainfrom
GabriFedi97:fix/rbac-cluster-finalizers

Conversation

@GabriFedi97

@GabriFedi97 GabriFedi97 commented Aug 8, 2025

Copy link
Copy Markdown
Member

closes #464

@GabriFedi97 GabriFedi97 changed the title Fix/rbac cluster finalizers fix: add cluster/finalizers update permission Aug 8, 2025
@GabriFedi97
GabriFedi97 marked this pull request as ready for review August 8, 2025 14:22
@GabriFedi97
GabriFedi97 requested a review from a team August 8, 2025 14:22
@dosubot dosubot Bot added size:XS This PR changes 0-9 lines, ignoring generated files. bug Something isn't working labels Aug 8, 2025
Comment thread Makefile
@leonardoce
leonardoce force-pushed the fix/rbac-cluster-finalizers branch from 47d4eb1 to 269ee2a Compare August 14, 2025 12:30
leonardoce
leonardoce previously approved these changes Aug 14, 2025
@dosubot dosubot Bot added the lgtm This PR has been approved by a maintainer label Aug 14, 2025
@leonardoce

Copy link
Copy Markdown
Contributor

@GabriFedi97 can you fix the issues raised by the CI, please?

@leonardoce
leonardoce self-requested a review August 14, 2025 12:51
@dosubot dosubot Bot added size:S This PR changes 10-29 lines, ignoring generated files. and removed size:XS This PR changes 0-9 lines, ignoring generated files. labels Aug 14, 2025
@GabriFedi97
GabriFedi97 force-pushed the fix/rbac-cluster-finalizers branch 2 times, most recently from b6dbed2 to 8113c93 Compare August 14, 2025 14:04
@leonardoce
leonardoce force-pushed the fix/rbac-cluster-finalizers branch from 8113c93 to 2d86635 Compare August 14, 2025 15:06
Add the required missing permission to operate in k8s
environments where the Admission Controller
Plugin "OwnerReferencesPermissionEnforcement"
is enabled.

Signed-off-by: Gabriele Fedi <gabriele.fedi@enterprisedb.com>
Signed-off-by: Gabriele Fedi <gabriele.fedi@enterprisedb.com>
Signed-off-by: Gabriele Fedi <gabriele.fedi@enterprisedb.com>
@leonardoce
leonardoce force-pushed the fix/rbac-cluster-finalizers branch from 2d86635 to d73b95c Compare August 14, 2025 20:22
@leonardoce
leonardoce merged commit e0c8b64 into cloudnative-pg:main Aug 14, 2025
4 checks passed
ermakov-oleg referenced this pull request in ermakov-oleg/cnpg-plugin-pgbackrest Feb 13, 2026
…ssionEnforcement

Port of upstream PR #465. Required for clusters with Admission Controller
"OwnerReferencesPermissionEnforcement". Also fix Makefile to include
internal/ paths for RBAC marker generation.
mnencia added a commit that referenced this pull request Apr 9, 2026
When an ObjectStore's credentials change (e.g., secret rename), the
RBAC Role granting the Cluster's ServiceAccount access to those secrets
was not updated because nothing triggered a Cluster reconciliation.

Implement the ObjectStore controller's Reconcile to detect affected
Roles and update their rules directly, without needing access to
Cluster objects. The controller lists Roles by a well-known label
(barmancloud.cnpg.io/cluster), inspects their rules to find which
ObjectStores they reference, fetches those ObjectStores, and patches
the rules to match the current specs.

Extract BuildRoleRules into a shared function and add
ObjectStoreNamesFromRole for semantic rule inspection. Add
EnsureRoleRules for the ObjectStore controller path (rules-only patch,
no owner references). Refactor patchRole to use retry.RetryOnConflict
(matching the existing project pattern) and support atomic label +
rules patching.

Replace the custom setOwnerReference helper (ownership.go) with
controllerutil.SetControllerReference. Add dynamic CNPG scheme
registration (internal/scheme) to the operator, instance, and restore
managers.

Remove clusters get/list/watch RBAC permission (the plugin no longer
lists Cluster objects). Retain clusters/finalizers update permission
required by OwnerReferencesPermissionEnforcement admission controller
(see #465).

Signed-off-by: Marco Nenciarini <marco.nenciarini@enterprisedb.com>
mnencia added a commit that referenced this pull request Apr 9, 2026
When an ObjectStore's credentials change (e.g., secret rename), the
RBAC Role granting the Cluster's ServiceAccount access to those secrets
was not updated because nothing triggered a Cluster reconciliation.

Implement the ObjectStore controller's Reconcile to detect affected
Roles and update their rules directly, without needing access to
Cluster objects. The controller lists Roles by a well-known label
(barmancloud.cnpg.io/cluster), inspects their rules to find which
ObjectStores they reference, fetches those ObjectStores, and patches
the rules to match the current specs.

Extract BuildRoleRules into a shared function and add
ObjectStoreNamesFromRole for semantic rule inspection. Add
EnsureRoleRules for the ObjectStore controller path (rules-only patch,
no owner references). Refactor patchRole to use retry.RetryOnConflict
(matching the existing project pattern) and support atomic label +
rules patching.

Replace the custom setOwnerReference helper (ownership.go) with
controllerutil.SetControllerReference. Add dynamic CNPG scheme
registration (internal/scheme) to the operator, instance, and restore
managers.

Remove clusters get/list/watch RBAC permission (the plugin no longer
lists Cluster objects). Retain clusters/finalizers update permission
required by OwnerReferencesPermissionEnforcement admission controller
(see #465).

Signed-off-by: Marco Nenciarini <marco.nenciarini@enterprisedb.com>
eleboucher pushed a commit to eleboucher/homelab that referenced this pull request Apr 14, 2026
…rman-cloud (0.5.0 → 0.6.0) (#164)

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [ghcr.io/cloudnative-pg/charts/plugin-barman-cloud](https://cloudnative-pg.io) ([source](https://github.com/cloudnative-pg/plugin-barman-cloud)) | minor | `0.5.0` → `0.6.0` |

---

### Release Notes

<details>
<summary>cloudnative-pg/plugin-barman-cloud (ghcr.io/cloudnative-pg/charts/plugin-barman-cloud)</summary>

### [`v0.6.0`](https://github.com/cloudnative-pg/plugin-barman-cloud/blob/HEAD/CHANGELOG.md#060-2025-08-21)

[Compare Source](cloudnative-pg/plugin-barman-cloud@v0.5.0...v0.6.0)

##### Features

- Add upstream backup and recovery metrics ([#&#8203;459](cloudnative-pg/plugin-barman-cloud#459)) ([33172b6](cloudnative-pg/plugin-barman-cloud@33172b6))
- Last failed backup status field and metric ([#&#8203;467](cloudnative-pg/plugin-barman-cloud#467)) ([551a3cd](cloudnative-pg/plugin-barman-cloud@551a3cd))

##### Bug Fixes

- Add cluster/finalizers update permission ([#&#8203;465](cloudnative-pg/plugin-barman-cloud#465)) ([e0c8b64](cloudnative-pg/plugin-barman-cloud@e0c8b64))
- Check for empty WAL archive during WAL archiving ([#&#8203;458](cloudnative-pg/plugin-barman-cloud#458)) ([950364b](cloudnative-pg/plugin-barman-cloud@950364b)), closes [#&#8203;457](cloudnative-pg/plugin-barman-cloud#457)
- **ci:** Show test output on failures ([#&#8203;461](cloudnative-pg/plugin-barman-cloud#461)) ([3a77079](cloudnative-pg/plugin-barman-cloud@3a77079))
- **deps:** Lock file maintenance documentation dependencies ([#&#8203;379](cloudnative-pg/plugin-barman-cloud#379)) ([a0327ea](cloudnative-pg/plugin-barman-cloud@a0327ea))
- **deps:** Lock file maintenance documentation dependencies ([#&#8203;399](cloudnative-pg/plugin-barman-cloud#399)) ([7146c51](cloudnative-pg/plugin-barman-cloud@7146c51))
- **deps:** Lock file maintenance documentation dependencies ([#&#8203;407](cloudnative-pg/plugin-barman-cloud#407)) ([4d323c2](cloudnative-pg/plugin-barman-cloud@4d323c2))
- **deps:** Lock file maintenance documentation dependencies ([#&#8203;412](cloudnative-pg/plugin-barman-cloud#412)) ([7aaebb3](cloudnative-pg/plugin-barman-cloud@7aaebb3))
- **deps:** Lock file maintenance documentation dependencies ([#&#8203;492](cloudnative-pg/plugin-barman-cloud#492)) ([4ab42c4](cloudnative-pg/plugin-barman-cloud@4ab42c4))
- **deps:** Update all non-major go dependencies ([#&#8203;435](cloudnative-pg/plugin-barman-cloud#435)) ([6028011](cloudnative-pg/plugin-barman-cloud@6028011))
- **deps:** Update all non-major go dependencies ([#&#8203;469](cloudnative-pg/plugin-barman-cloud#469)) ([a7bde51](cloudnative-pg/plugin-barman-cloud@a7bde51))
- **deps:** Update k8s.io/utils digest to [`0af2bda`](cloudnative-pg/plugin-barman-cloud@0af2bda) ([#&#8203;487](cloudnative-pg/plugin-barman-cloud#487)) ([83ada2b](cloudnative-pg/plugin-barman-cloud@83ada2b))
- **deps:** Update k8s.io/utils digest to [`4c0f3b2`](cloudnative-pg/plugin-barman-cloud@4c0f3b2) ([#&#8203;392](cloudnative-pg/plugin-barman-cloud#392)) ([e58973c](cloudnative-pg/plugin-barman-cloud@e58973c))
- **deps:** Update kubernetes packages to v0.33.2 ([#&#8203;410](cloudnative-pg/plugin-barman-cloud#410)) ([e598fb3](cloudnative-pg/plugin-barman-cloud@e598fb3))
- **deps:** Update kubernetes packages to v0.33.3 ([#&#8203;450](cloudnative-pg/plugin-barman-cloud#450)) ([32a5539](cloudnative-pg/plugin-barman-cloud@32a5539))
- **deps:** Update kubernetes packages to v0.33.4 ([#&#8203;481](cloudnative-pg/plugin-barman-cloud#481)) ([423cd5f](cloudnative-pg/plugin-barman-cloud@423cd5f))
- **deps:** Update module github.com/cert-manager/cert-manager to v1.18.1 ([#&#8203;401](cloudnative-pg/plugin-barman-cloud#401)) ([0769a28](cloudnative-pg/plugin-barman-cloud@0769a28))
- **deps:** Update module github.com/cloudnative-pg/api to v1.26.0 ([#&#8203;440](cloudnative-pg/plugin-barman-cloud#440)) ([68dfd0e](cloudnative-pg/plugin-barman-cloud@68dfd0e))
- **deps:** Update module github.com/cloudnative-pg/cnpg-i-machinery to v0.4.0 ([#&#8203;439](cloudnative-pg/plugin-barman-cloud#439)) ([e98facc](cloudnative-pg/plugin-barman-cloud@e98facc))
- **deps:** Update module github.com/onsi/ginkgo/v2 to v2.25.0 ([#&#8203;489](cloudnative-pg/plugin-barman-cloud#489)) ([5b67c11](cloudnative-pg/plugin-barman-cloud@5b67c11))
- **deps:** Update module google.golang.org/grpc to v1.73.0 ([#&#8203;394](cloudnative-pg/plugin-barman-cloud#394)) ([1365906](cloudnative-pg/plugin-barman-cloud@1365906))
- **deps:** Update module google.golang.org/grpc to v1.75.0 ([#&#8203;484](cloudnative-pg/plugin-barman-cloud#484)) ([86496ac](cloudnative-pg/plugin-barman-cloud@86496ac))
- **deps:** Update module sigs.k8s.io/kustomize/api to v0.20.0 ([#&#8203;431](cloudnative-pg/plugin-barman-cloud#431)) ([d0013df](cloudnative-pg/plugin-barman-cloud@d0013df))
- **deps:** Update module sigs.k8s.io/kustomize/api to v0.20.1 ([#&#8203;471](cloudnative-pg/plugin-barman-cloud#471)) ([fa20c09](cloudnative-pg/plugin-barman-cloud@fa20c09))
- **images:** Use bookworm for sidecar image ([#&#8203;476](cloudnative-pg/plugin-barman-cloud#476)) ([b264582](cloudnative-pg/plugin-barman-cloud@b264582))
- Logic to retrieve ObjectStore from cache ([#&#8203;429](cloudnative-pg/plugin-barman-cloud#429)) ([2a75d40](cloudnative-pg/plugin-barman-cloud@2a75d40))
- **unit-tests:** Metrics collect length ([#&#8203;475](cloudnative-pg/plugin-barman-cloud#475)) ([e40ba70](cloudnative-pg/plugin-barman-cloud@e40ba70))

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMDEuMSIsInVwZGF0ZWRJblZlciI6IjQzLjEwMS4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL21pbm9yIl19-->

Reviewed-on: https://git.erwanleboucher.dev/eleboucher/homelab/pulls/164
Co-authored-by: bot-owl <bot@erwanleboucher.dev>
Co-committed-by: bot-owl <bot@erwanleboucher.dev>
blake-hamm added a commit to blake-hamm/bhamm-lab that referenced this pull request Jun 16, 2026
…in-barman-cloud to v0.13.0 (#202)

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [https://github.com/cloudnative-pg/plugin-barman-cloud](https://github.com/cloudnative-pg/plugin-barman-cloud) | minor | `v0.5.0` → `v0.13.0` |

---

### Release Notes

<details>
<summary>cloudnative-pg/plugin-barman-cloud (https://github.com/cloudnative-pg/plugin-barman-cloud)</summary>

### [`v0.13.0`](https://github.com/cloudnative-pg/plugin-barman-cloud/releases/tag/v0.13.0)

[Compare Source](cloudnative-pg/plugin-barman-cloud@v0.12.0...v0.13.0)

##### Features

- Configure k8s recommended labels on subresources ([#&#8203;865](cloudnative-pg/plugin-barman-cloud#865)) ([4bbaf18](cloudnative-pg/plugin-barman-cloud@4bbaf18)), closes [#&#8203;545](cloudnative-pg/plugin-barman-cloud#545)
- Pass additionalCommandArgs to barman-cloud-restore ([#&#8203;914](cloudnative-pg/plugin-barman-cloud#914)) ([c5f149b](cloudnative-pg/plugin-barman-cloud@c5f149b)), closes [#&#8203;821](cloudnative-pg/plugin-barman-cloud#821)

##### Bug Fixes

- Add lz4 compression support for base backups ([#&#8203;868](cloudnative-pg/plugin-barman-cloud#868)) ([e30154b](cloudnative-pg/plugin-barman-cloud@e30154b)), closes [#&#8203;867](cloudnative-pg/plugin-barman-cloud#867)
- Classify WAL restore errors with precise gRPC statuses ([#&#8203;927](cloudnative-pg/plugin-barman-cloud#927)) ([aaf6120](cloudnative-pg/plugin-barman-cloud@aaf6120))
- **deps:** Update all non-major go dependencies ([#&#8203;877](cloudnative-pg/plugin-barman-cloud#877)) ([a81f6e3](cloudnative-pg/plugin-barman-cloud@a81f6e3))
- **deps:** Update all non-major go dependencies ([#&#8203;898](cloudnative-pg/plugin-barman-cloud#898)) ([acdbfb8](cloudnative-pg/plugin-barman-cloud@acdbfb8))
- **deps:** Update all non-major go dependencies to [`5d46599`](cloudnative-pg/plugin-barman-cloud@5d46599) ([#&#8203;940](cloudnative-pg/plugin-barman-cloud#940)) ([40aa4b2](cloudnative-pg/plugin-barman-cloud@40aa4b2))
- **deps:** Update all non-major go dependencies to [`8e1642e`](cloudnative-pg/plugin-barman-cloud@8e1642e) ([#&#8203;939](cloudnative-pg/plugin-barman-cloud#939)) ([f708825](cloudnative-pg/plugin-barman-cloud@f708825))
- **deps:** Update all non-major go dependencies to [`bd68198`](cloudnative-pg/plugin-barman-cloud@bd68198) ([#&#8203;950](cloudnative-pg/plugin-barman-cloud#950)) ([787d2b3](cloudnative-pg/plugin-barman-cloud@787d2b3))
- **deps:** Update documentation dependencies to v3.10.1 ([#&#8203;878](cloudnative-pg/plugin-barman-cloud#878)) ([6cf473d](cloudnative-pg/plugin-barman-cloud@6cf473d))
- **deps:** Update k8s.io/utils digest to [`ff6756f`](cloudnative-pg/plugin-barman-cloud@ff6756f) ([#&#8203;894](cloudnative-pg/plugin-barman-cloud#894)) ([b7389e1](cloudnative-pg/plugin-barman-cloud@b7389e1))
- **deps:** Update kubernetes monorepo to v0.35.4 ([#&#8203;853](cloudnative-pg/plugin-barman-cloud#853)) ([21f811a](cloudnative-pg/plugin-barman-cloud@21f811a))
- **deps:** Update kubernetes monorepo to v0.36.1 ([#&#8203;909](cloudnative-pg/plugin-barman-cloud#909)) ([99eb4a3](cloudnative-pg/plugin-barman-cloud@99eb4a3))
- **deps:** Update module github.com/cloudnative-pg/cloudnative-pg to v1.29.1 \[security] ([#&#8203;902](cloudnative-pg/plugin-barman-cloud#902)) ([ba5063f](cloudnative-pg/plugin-barman-cloud@ba5063f))
- **deps:** Update module github.com/cloudnative-pg/machinery to v0.5.0 ([#&#8203;925](cloudnative-pg/plugin-barman-cloud#925)) ([ef4b711](cloudnative-pg/plugin-barman-cloud@ef4b711))
- **deps:** Update module github.com/onsi/ginkgo/v2 to v2.28.2 ([#&#8203;874](cloudnative-pg/plugin-barman-cloud#874)) ([8cb32e5](cloudnative-pg/plugin-barman-cloud@8cb32e5))
- **deps:** Update module google.golang.org/grpc to v1.81.0 ([#&#8203;884](cloudnative-pg/plugin-barman-cloud#884)) ([6fdecfd](cloudnative-pg/plugin-barman-cloud@6fdecfd))
- **deps:** Update module sigs.k8s.io/controller-runtime to v0.24.0 ([#&#8203;880](cloudnative-pg/plugin-barman-cloud#880)) ([58f4fed](cloudnative-pg/plugin-barman-cloud@58f4fed))
- **deps:** Update module sigs.k8s.io/controller-runtime to v0.24.1 ([#&#8203;910](cloudnative-pg/plugin-barman-cloud#910)) ([9be87b0](cloudnative-pg/plugin-barman-cloud@9be87b0))
- **docs:** Update broken link to CloudNativePG documentation ([#&#8203;904](cloudnative-pg/plugin-barman-cloud#904)) ([43f92fb](cloudnative-pg/plugin-barman-cloud@43f92fb)), closes [#&#8203;729](cloudnative-pg/plugin-barman-cloud#729)
- **scheme:** Register meta types for CNPG scheme group version ([#&#8203;943](cloudnative-pg/plugin-barman-cloud#943)) ([bb7845d](cloudnative-pg/plugin-barman-cloud@bb7845d)), closes [#&#8203;942](cloudnative-pg/plugin-barman-cloud#942)

### [`v0.12.0`](https://github.com/cloudnative-pg/plugin-barman-cloud/releases/tag/v0.12.0)

[Compare Source](cloudnative-pg/plugin-barman-cloud@v0.11.0...v0.12.0)

##### Features

- **deps:** Update dependency barman to v3.18.0 ([#&#8203;813](cloudnative-pg/plugin-barman-cloud#813)) ([a8b446f](cloudnative-pg/plugin-barman-cloud@a8b446f))

##### Bug Fixes

- **deps:** Update all non-major go dependencies ([#&#8203;751](cloudnative-pg/plugin-barman-cloud#751)) ([5001fe7](cloudnative-pg/plugin-barman-cloud@5001fe7))
- **deps:** Update all non-major go dependencies ([#&#8203;757](cloudnative-pg/plugin-barman-cloud#757)) ([d031c23](cloudnative-pg/plugin-barman-cloud@d031c23))
- **deps:** Update all non-major go dependencies ([#&#8203;801](cloudnative-pg/plugin-barman-cloud#801)) ([6ae101f](cloudnative-pg/plugin-barman-cloud@6ae101f))
- **deps:** Update dependency [@&#8203;easyops-cn/docusaurus-search-local](https://github.com/easyops-cn/docusaurus-search-local) to ^0.55.0 ([#&#8203;753](cloudnative-pg/plugin-barman-cloud#753)) ([60d32cc](cloudnative-pg/plugin-barman-cloud@60d32cc))
- **deps:** Update documentation dependencies ([#&#8203;833](cloudnative-pg/plugin-barman-cloud#833)) ([e1d4a6e](cloudnative-pg/plugin-barman-cloud@e1d4a6e))
- **deps:** Update k8s.io/utils digest to [`28399d8`](cloudnative-pg/plugin-barman-cloud@28399d8) ([#&#8203;829](cloudnative-pg/plugin-barman-cloud#829)) ([3549e26](cloudnative-pg/plugin-barman-cloud@3549e26))
- **deps:** Update k8s.io/utils digest to [`b8788ab`](cloudnative-pg/plugin-barman-cloud@b8788ab) ([#&#8203;784](cloudnative-pg/plugin-barman-cloud#784)) ([f64ff8e](cloudnative-pg/plugin-barman-cloud@f64ff8e))
- **deps:** Update kubernetes packages to v0.35.2 ([#&#8203;788](cloudnative-pg/plugin-barman-cloud#788)) ([a7e28f6](cloudnative-pg/plugin-barman-cloud@a7e28f6))
- **deps:** Update module github.com/cert-manager/cert-manager to v1.19.3 \[security] ([#&#8203;775](cloudnative-pg/plugin-barman-cloud#775)) ([79238f5](cloudnative-pg/plugin-barman-cloud@79238f5))
- **deps:** Update module github.com/cert-manager/cert-manager to v1.20.2 ([#&#8203;844](cloudnative-pg/plugin-barman-cloud#844)) ([441f43b](cloudnative-pg/plugin-barman-cloud@441f43b))
- **deps:** Update module github.com/cloudnative-pg/api to v1.29.0 ([#&#8203;837](cloudnative-pg/plugin-barman-cloud#837)) ([09181b0](cloudnative-pg/plugin-barman-cloud@09181b0))
- **deps:** Update module github.com/cloudnative-pg/machinery to v0.4.0 ([#&#8203;850](cloudnative-pg/plugin-barman-cloud#850)) ([18e3888](cloudnative-pg/plugin-barman-cloud@18e3888))
- **deps:** Update module google.golang.org/grpc to v1.79.3 \[security] ([#&#8203;819](cloudnative-pg/plugin-barman-cloud#819)) ([376e178](cloudnative-pg/plugin-barman-cloud@376e178))
- **deps:** Update module sigs.k8s.io/controller-runtime to v0.23.3 ([#&#8203;789](cloudnative-pg/plugin-barman-cloud#789)) ([3f726ea](cloudnative-pg/plugin-barman-cloud@3f726ea))
- **deps:** Update module sigs.k8s.io/kustomize/api to v0.21.1 ([#&#8203;790](cloudnative-pg/plugin-barman-cloud#790)) ([84a388e](cloudnative-pg/plugin-barman-cloud@84a388e))
- **metrics:** Announce sidecar injection capability ([#&#8203;776](cloudnative-pg/plugin-barman-cloud#776)) ([4a94cb9](cloudnative-pg/plugin-barman-cloud@4a94cb9))
- **rbac:** Reconcile Role when ObjectStore spec changes ([#&#8203;823](cloudnative-pg/plugin-barman-cloud#823)) ([8971a39](cloudnative-pg/plugin-barman-cloud@8971a39))
- **restore:** Race condition in parallel WAL restore spool ([#&#8203;812](cloudnative-pg/plugin-barman-cloud#812)) ([25d72ce](cloudnative-pg/plugin-barman-cloud@25d72ce))
- **restore:** Use custom CNPG group and version for scheme registration ([#&#8203;847](cloudnative-pg/plugin-barman-cloud#847)) ([b1f373d](cloudnative-pg/plugin-barman-cloud@b1f373d))
- **security:** Harden GitHub Actions workflows against expression injection ([#&#8203;773](cloudnative-pg/plugin-barman-cloud#773)) ([ce7b761](cloudnative-pg/plugin-barman-cloud@ce7b761))
- Skip maintenance cycle when plugin is not enabled for backups ([#&#8203;826](cloudnative-pg/plugin-barman-cloud#826)) ([63a67cb](cloudnative-pg/plugin-barman-cloud@63a67cb)), closes [#&#8203;774](cloudnative-pg/plugin-barman-cloud#774)

### [`v0.11.0`](https://github.com/cloudnative-pg/plugin-barman-cloud/releases/tag/v0.11.0)

[Compare Source](cloudnative-pg/plugin-barman-cloud@v0.10.0...v0.11.0)

##### Features

- Add support for DefaultAzureCredential authentication mechanism ([#&#8203;681](cloudnative-pg/plugin-barman-cloud#681)) ([2c134ea](cloudnative-pg/plugin-barman-cloud@2c134ea))
- **deps:** Update barman-cloud to v3.17.0 ([#&#8203;702](cloudnative-pg/plugin-barman-cloud#702)) ([fa546ea](cloudnative-pg/plugin-barman-cloud@fa546ea))

##### Bug Fixes

- **azure:** Update barman-cloud with Azure validation fix ([#&#8203;710](cloudnative-pg/plugin-barman-cloud#710)) ([0153abb](cloudnative-pg/plugin-barman-cloud@0153abb)), closes [#&#8203;705](cloudnative-pg/plugin-barman-cloud#705)
- **deps:** Update all non-major go dependencies ([#&#8203;719](cloudnative-pg/plugin-barman-cloud#719)) ([4a637d7](cloudnative-pg/plugin-barman-cloud@4a637d7))
- **deps:** Update k8s.io/utils digest to [`914a6e7`](cloudnative-pg/plugin-barman-cloud@914a6e7) ([#&#8203;715](cloudnative-pg/plugin-barman-cloud#715)) ([b3bcf6d](cloudnative-pg/plugin-barman-cloud@b3bcf6d))
- **deps:** Update module sigs.k8s.io/controller-runtime to v0.23.1 ([#&#8203;748](cloudnative-pg/plugin-barman-cloud#748)) ([71bd4d8](cloudnative-pg/plugin-barman-cloud@71bd4d8))
- Resolve WAL archiving performance and memory issues ([#&#8203;746](cloudnative-pg/plugin-barman-cloud#746)) ([378c76a](cloudnative-pg/plugin-barman-cloud@378c76a)), closes [#&#8203;735](cloudnative-pg/plugin-barman-cloud#735)

### [`v0.10.0`](https://github.com/cloudnative-pg/plugin-barman-cloud/releases/tag/v0.10.0)

[Compare Source](cloudnative-pg/plugin-barman-cloud@v0.9.0...v0.10.0)

##### Features

- Add `pprof-server` support  ([#&#8203;538](cloudnative-pg/plugin-barman-cloud#538)) ([921b20c](cloudnative-pg/plugin-barman-cloud@921b20c)), closes [#&#8203;421](cloudnative-pg/plugin-barman-cloud#421)
- Remove wal from cache after archiving ([#&#8203;659](cloudnative-pg/plugin-barman-cloud#659)) ([df22bf2](cloudnative-pg/plugin-barman-cloud@df22bf2))

##### Bug Fixes

- **deps:** Update all non-major go dependencies ([#&#8203;685](cloudnative-pg/plugin-barman-cloud#685)) ([df2f91d](cloudnative-pg/plugin-barman-cloud@df2f91d))
- **deps:** Update all non-major go dependencies ([#&#8203;701](cloudnative-pg/plugin-barman-cloud#701)) ([db96dcc](cloudnative-pg/plugin-barman-cloud@db96dcc))
- **deps:** Update k8s.io/utils digest to [`383b50a`](cloudnative-pg/plugin-barman-cloud@383b50a) ([#&#8203;695](cloudnative-pg/plugin-barman-cloud#695)) ([95ef5dc](cloudnative-pg/plugin-barman-cloud@95ef5dc))
- **deps:** Update k8s.io/utils digest to [`9d40a56`](cloudnative-pg/plugin-barman-cloud@9d40a56) ([#&#8203;684](cloudnative-pg/plugin-barman-cloud#684)) ([0ea3d91](cloudnative-pg/plugin-barman-cloud@0ea3d91))
- **deps:** Update kubernetes packages to v0.35.0 ([#&#8203;694](cloudnative-pg/plugin-barman-cloud#694)) ([30dbc44](cloudnative-pg/plugin-barman-cloud@30dbc44))
- **deps:** Update module google.golang.org/grpc to v1.78.0 ([#&#8203;697](cloudnative-pg/plugin-barman-cloud#697)) ([3f8d4f7](cloudnative-pg/plugin-barman-cloud@3f8d4f7))
- **deps:** Update module sigs.k8s.io/kustomize/api to v0.21.0 ([#&#8203;651](cloudnative-pg/plugin-barman-cloud#651)) ([ef19031](cloudnative-pg/plugin-barman-cloud@ef19031))
- Don't log full environment variables at default log level ([#&#8203;589](cloudnative-pg/plugin-barman-cloud#589)) ([a487c4e](cloudnative-pg/plugin-barman-cloud@a487c4e))
- **targetTime:** Treat RFC3339-like timestamps without timezone as UTC ([#&#8203;700](cloudnative-pg/plugin-barman-cloud#700)) ([1f1d300](cloudnative-pg/plugin-barman-cloud@1f1d300)), closes [#&#8203;699](cloudnative-pg/plugin-barman-cloud#699)

### [`v0.9.0`](https://github.com/cloudnative-pg/plugin-barman-cloud/releases/tag/v0.9.0)

[Compare Source](cloudnative-pg/plugin-barman-cloud@v0.8.0...v0.9.0)

##### Features

- **deps:** Update barman-cloud to v3.16.2 ([#&#8203;609](cloudnative-pg/plugin-barman-cloud#609)) ([1ef53d0](cloudnative-pg/plugin-barman-cloud@1ef53d0))

##### Bug Fixes

- **deps:** Update module github.com/onsi/ginkgo/v2 to v2.27.2 ([#&#8203;635](cloudnative-pg/plugin-barman-cloud#635)) ([57e861d](cloudnative-pg/plugin-barman-cloud@57e861d))
- **deps:** Update module sigs.k8s.io/controller-runtime to v0.22.4 ([#&#8203;636](cloudnative-pg/plugin-barman-cloud#636)) ([33f3373](cloudnative-pg/plugin-barman-cloud@33f3373))
- **docs:** Use `archiveAdditionalCommandArgs` for WAL archive configuration ([#&#8203;630](cloudnative-pg/plugin-barman-cloud#630)) ([4aa47a7](cloudnative-pg/plugin-barman-cloud@4aa47a7))

### [`v0.8.0`](https://github.com/cloudnative-pg/plugin-barman-cloud/releases/tag/v0.8.0)

[Compare Source](cloudnative-pg/plugin-barman-cloud@v0.7.0...v0.8.0)

##### ⚠ BREAKING CHANGES

- **rbac:** Resource names have been prefixed to avoid cluster conflicts. All cluster-scoped and namespace-scoped resources now use the `barman-plugin-` prefix for consistency; see the [Resource Name Migration Guide](https://cloudnative-pg.io/plugin-barman-cloud/docs/resource-name-migration/) for detailed migration instructions.

##### Features

- **ip:** Assign copyright to the Linux Foundation ([#&#8203;571](cloudnative-pg/plugin-barman-cloud#571)) ([1be34fe](cloudnative-pg/plugin-barman-cloud@1be34fe))
- **rbac:** Prefix all resource names to avoid cluster conflicts ([#&#8203;593](cloudnative-pg/plugin-barman-cloud#593)) ([c2bfe12](cloudnative-pg/plugin-barman-cloud@c2bfe12)), closes [#&#8203;395](cloudnative-pg/plugin-barman-cloud#395)

##### Bug Fixes

- **deps,security:** Update to go 1.25.2 ([#&#8203;581](cloudnative-pg/plugin-barman-cloud#581)) ([523bd1e](cloudnative-pg/plugin-barman-cloud@523bd1e)), closes [#&#8203;580](cloudnative-pg/plugin-barman-cloud#580)
- **deps:** Lock file maintenance documentation dependencies ([#&#8203;555](cloudnative-pg/plugin-barman-cloud#555)) ([fad3a65](cloudnative-pg/plugin-barman-cloud@fad3a65))
- **deps:** Lock file maintenance documentation dependencies ([#&#8203;612](cloudnative-pg/plugin-barman-cloud#612)) ([da5acb5](cloudnative-pg/plugin-barman-cloud@da5acb5))
- **deps:** Update all non-major go dependencies ([#&#8203;616](cloudnative-pg/plugin-barman-cloud#616)) ([3a9697e](cloudnative-pg/plugin-barman-cloud@3a9697e))
- **deps:** Update k8s.io/utils digest to [`bc988d5`](cloudnative-pg/plugin-barman-cloud@bc988d5) ([#&#8203;559](cloudnative-pg/plugin-barman-cloud#559)) ([36db77c](cloudnative-pg/plugin-barman-cloud@36db77c))
- **deps:** Update module github.com/cert-manager/cert-manager to v1.19.0 ([#&#8203;575](cloudnative-pg/plugin-barman-cloud#575)) ([484b280](cloudnative-pg/plugin-barman-cloud@484b280))
- **deps:** Update module github.com/cert-manager/cert-manager to v1.19.1 ([#&#8203;600](cloudnative-pg/plugin-barman-cloud#600)) ([d8f78f9](cloudnative-pg/plugin-barman-cloud@d8f78f9))
- **deps:** Update module github.com/onsi/ginkgo/v2 to v2.26.0 ([#&#8203;560](cloudnative-pg/plugin-barman-cloud#560)) ([529737f](cloudnative-pg/plugin-barman-cloud@529737f))
- **deps:** Update module github.com/onsi/ginkgo/v2 to v2.27.0 ([#&#8203;614](cloudnative-pg/plugin-barman-cloud#614)) ([6700c60](cloudnative-pg/plugin-barman-cloud@6700c60))
- **deps:** Update module google.golang.org/grpc to v1.76.0 ([#&#8203;569](cloudnative-pg/plugin-barman-cloud#569)) ([e1bc0a1](cloudnative-pg/plugin-barman-cloud@e1bc0a1))
- **deps:** Update module sigs.k8s.io/controller-runtime to v0.22.2 ([#&#8203;568](cloudnative-pg/plugin-barman-cloud#568)) ([1b5955e](cloudnative-pg/plugin-barman-cloud@1b5955e))
- **deps:** Update module sigs.k8s.io/controller-runtime to v0.22.3 ([#&#8203;586](cloudnative-pg/plugin-barman-cloud#586)) ([ea76733](cloudnative-pg/plugin-barman-cloud@ea76733))
- Disable management of end-of-wal file flag during backup restoration ([#&#8203;604](cloudnative-pg/plugin-barman-cloud#604)) ([931a06a](cloudnative-pg/plugin-barman-cloud@931a06a)), closes [#&#8203;603](cloudnative-pg/plugin-barman-cloud#603)
- **e2e:** Avoid pinpointing the PostgreSQL version ([#&#8203;562](cloudnative-pg/plugin-barman-cloud#562)) ([5276dd1](cloudnative-pg/plugin-barman-cloud@5276dd1))
- Set LeaderElectionReleaseOnCancel to true to enable RollingUpdates ([#&#8203;615](cloudnative-pg/plugin-barman-cloud#615)) ([49f1096](cloudnative-pg/plugin-barman-cloud@49f1096)), closes [#&#8203;419](cloudnative-pg/plugin-barman-cloud#419)

### [`v0.7.0`](https://github.com/cloudnative-pg/plugin-barman-cloud/releases/tag/v0.7.0)

[Compare Source](cloudnative-pg/plugin-barman-cloud@v0.6.0...v0.7.0)

##### Features

- Introduce `logLevel` setting to control verbosity ([#&#8203;536](cloudnative-pg/plugin-barman-cloud#536)) ([0501e18](cloudnative-pg/plugin-barman-cloud@0501e18))
- Return proper gRPC error codes for expected conditions ([#&#8203;549](cloudnative-pg/plugin-barman-cloud#549)) ([08c3f1c](cloudnative-pg/plugin-barman-cloud@08c3f1c))
- **spec:** Add support for additional sidecar container arguments ([#&#8203;520](cloudnative-pg/plugin-barman-cloud#520)) ([ec352ac](cloudnative-pg/plugin-barman-cloud@ec352ac))

##### Bug Fixes

- Avoid panicking if serverRecoveryWindow has still not been set ([#&#8203;525](cloudnative-pg/plugin-barman-cloud#525)) ([dfd9861](cloudnative-pg/plugin-barman-cloud@dfd9861)), closes [#&#8203;523](cloudnative-pg/plugin-barman-cloud#523)
- **deps:** Lock file maintenance documentation dependencies ([#&#8203;534](cloudnative-pg/plugin-barman-cloud#534)) ([0ad066d](cloudnative-pg/plugin-barman-cloud@0ad066d))
- **deps:** Update all non-major go dependencies ([#&#8203;521](cloudnative-pg/plugin-barman-cloud#521)) ([df92fa6](cloudnative-pg/plugin-barman-cloud@df92fa6))
- **deps:** Update kubernetes packages to v0.34.1 ([#&#8203;530](cloudnative-pg/plugin-barman-cloud#530)) ([eced5ea](cloudnative-pg/plugin-barman-cloud@eced5ea))
- **deps:** Update module github.com/cloudnative-pg/cnpg-i-machinery to v0.4.1 ([#&#8203;551](cloudnative-pg/plugin-barman-cloud#551)) ([65a0d11](cloudnative-pg/plugin-barman-cloud@65a0d11))
- **deps:** Update module github.com/onsi/ginkgo/v2 to v2.25.1 ([#&#8203;495](cloudnative-pg/plugin-barman-cloud#495)) ([2dc29a5](cloudnative-pg/plugin-barman-cloud@2dc29a5))
- **deps:** Update module sigs.k8s.io/controller-runtime to v0.22.1 ([#&#8203;531](cloudnative-pg/plugin-barman-cloud#531)) ([82449d9](cloudnative-pg/plugin-barman-cloud@82449d9))
- **logs:** Log the correct name when on ObjectStore not found error ([#&#8203;540](cloudnative-pg/plugin-barman-cloud#540)) ([a29aa1c](cloudnative-pg/plugin-barman-cloud@a29aa1c)), closes [#&#8203;539](cloudnative-pg/plugin-barman-cloud#539)
- **object-cache:** Improve reliability of object cache management ([#&#8203;508](cloudnative-pg/plugin-barman-cloud#508)) ([8c3db95](cloudnative-pg/plugin-barman-cloud@8c3db95)), closes [#&#8203;502](cloudnative-pg/plugin-barman-cloud#502)
- Typo in variable name ([#&#8203;515](cloudnative-pg/plugin-barman-cloud#515)) ([3c0d8c3](cloudnative-pg/plugin-barman-cloud@3c0d8c3))

### [`v0.6.0`](https://github.com/cloudnative-pg/plugin-barman-cloud/releases/tag/v0.6.0)

[Compare Source](cloudnative-pg/plugin-barman-cloud@v0.5.0...v0.6.0)

##### Features

- Add upstream backup and recovery metrics ([#&#8203;459](cloudnative-pg/plugin-barman-cloud#459)) ([33172b6](cloudnative-pg/plugin-barman-cloud@33172b6))
- Last failed backup status field and metric ([#&#8203;467](cloudnative-pg/plugin-barman-cloud#467)) ([551a3cd](cloudnative-pg/plugin-barman-cloud@551a3cd))

##### Bug Fixes

- Add cluster/finalizers update permission ([#&#8203;465](cloudnative-pg/plugin-barman-cloud#465)) ([e0c8b64](cloudnative-pg/plugin-barman-cloud@e0c8b64))
- Check for empty WAL archive during WAL archiving ([#&#8203;458](cloudnative-pg/plugin-barman-cloud#458)) ([950364b](cloudnative-pg/plugin-barman-cloud@950364b)), closes [#&#8203;457](cloudnative-pg/plugin-barman-cloud#457)
- **ci:** Show test output on failures ([#&#8203;461](cloudnative-pg/plugin-barman-cloud#461)) ([3a77079](cloudnative-pg/plugin-barman-cloud@3a77079))
- **deps:** Lock file maintenance documentation dependencies ([#&#8203;379](cloudnative-pg/plugin-barman-cloud#379)) ([a0327ea](cloudnative-pg/plugin-barman-cloud@a0327ea))
- **deps:** Lock file maintenance documentation dependencies ([#&#8203;399](cloudnative-pg/plugin-barman-cloud#399)) ([7146c51](cloudnative-pg/plugin-barman-cloud@7146c51))
- **deps:** Lock file maintenance documentation dependencies ([#&#8203;407](cloudnative-pg/plugin-barman-cloud#407)) ([4d323c2](cloudnative-pg/plugin-barman-cloud@4d323c2))
- **deps:** Lock file maintenance documentation dependencies ([#&#8203;412](cloudnative-pg/plugin-barman-cloud#412)) ([7aaebb3](cloudnative-pg/plugin-barman-cloud@7aaebb3))
- **deps:** Lock file maintenance documentation dependencies ([#&#8203;492](cloudnative-pg/plugin-barman-cloud#492)) ([4ab42c4](cloudnative-pg/plugin-barman-cloud@4ab42c4))
- **deps:** Update all non-major go dependencies ([#&#8203;435](cloudnative-pg/plugin-barman-cloud#435)) ([6028011](cloudnative-pg/plugin-barman-cloud@6028011))
- **deps:** Update all non-major go dependencies ([#&#8203;469](cloudnative-pg/plugin-barman-cloud#469)) ([a7bde51](cloudnative-pg/plugin-barman-cloud@a7bde51))
- **deps:** Update k8s.io/utils digest to [`0af2bda`](cloudnative-pg/plugin-barman-cloud@0af2bda) ([#&#8203;487](cloudnative-pg/plugin-barman-cloud#487)) ([83ada2b](cloudnative-pg/plugin-barman-cloud@83ada2b))
- **deps:** Update k8s.io/utils digest to [`4c0f3b2`](cloudnative-pg/plugin-barman-cloud@4c0f3b2) ([#&#8203;392](cloudnative-pg/plugin-barman-cloud#392)) ([e58973c](cloudnative-pg/plugin-barman-cloud@e58973c))
- **deps:** Update kubernetes packages to v0.33.2 ([#&#8203;410](cloudnative-pg/plugin-barman-cloud#410)) ([e598fb3](cloudnative-pg/plugin-barman-cloud@e598fb3))
- **deps:** Update kubernetes packages to v0.33.3 ([#&#8203;450](cloudnative-pg/plugin-barman-cloud#450)) ([32a5539](cloudnative-pg/plugin-barman-cloud@32a5539))
- **deps:** Update kubernetes packages to v0.33.4 ([#&#8203;481](cloudnative-pg/plugin-barman-cloud#481)) ([423cd5f](cloudnative-pg/plugin-barman-cloud@423cd5f))
- **deps:** Update module github.com/cert-manager/cert-manager to v1.18.1 ([#&#8203;401](cloudnative-pg/plugin-barman-cloud#401)) ([0769a28](cloudnative-pg/plugin-barman-cloud@0769a28))
- **deps:** Update module github.com/cloudnative-pg/api to v1.26.0 ([#&#8203;440](cloudnative-pg/plugin-barman-cloud#440)) ([68dfd0e](cloudnative-pg/plugin-barman-cloud@68dfd0e))
- **deps:** Update module github.com/cloudnative-pg/cnpg-i-machinery to v0.4.0 ([#&#8203;439](cloudnative-pg/plugin-barman-cloud#439)) ([e98facc](cloudnative-pg/plugin-barman-cloud@e98facc))
- **deps:** Update module github.com/onsi/ginkgo/v2 to v2.25.0 ([#&#8203;489](cloudnative-pg/plugin-barman-cloud#489)) ([5b67c11](cloudnative-pg/plugin-barman-cloud@5b67c11))
- **deps:** Update module google.golang.org/grpc to v1.73.0 ([#&#8203;394](cloudnative-pg/plugin-barman-cloud#394)) ([1365906](cloudnative-pg/plugin-barman-cloud@1365906))
- **deps:** Update module google.golang.org/grpc to v1.75.0 ([#&#8203;484](cloudnative-pg/plugin-barman-cloud#484)) ([86496ac](cloudnative-pg/plugin-barman-cloud@86496ac))
- **deps:** Update module sigs.k8s.io/kustomize/api to v0.20.0 ([#&#8203;431](cloudnative-pg/plugin-barman-cloud#431)) ([d0013df](cloudnative-pg/plugin-barman-cloud@d0013df))
- **deps:** Update module sigs.k8s.io/kustomize/api to v0.20.1 ([#&#8203;471](cloudnative-pg/plugin-barman-cloud#471)) ([fa20c09](cloudnative-pg/plugin-barman-cloud@fa20c09))
- **images:** Use bookworm for sidecar image ([#&#8203;476](cloudnative-pg/plugin-barman-cloud#476)) ([b264582](cloudnative-pg/plugin-barman-cloud@b264582))
- Logic to retrieve ObjectStore from cache ([#&#8203;429](cloudnative-pg/plugin-barman-cloud#429)) ([2a75d40](cloudnative-pg/plugin-barman-cloud@2a75d40))
- **unit-tests:** Metrics collect length ([#&#8203;475](cloudnative-pg/plugin-barman-cloud#475)) ([e40ba70](cloudnative-pg/plugin-barman-cloud@e40ba70))

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yMjAuMCIsInVwZGF0ZWRJblZlciI6IjQzLjIyMC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiXX0=-->

Co-authored-by: Renovate Bot <renovate@bhamm-lab.com>
Reviewed-on: https://codeberg.org/blake-hamm/bhamm-lab/pulls/202
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

bug Something isn't working lgtm This PR has been approved by a maintainer size:S This PR changes 10-29 lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Fix Role & RoleBinding creation with OwnerReferencesPermissionEnforcement enabled

2 participants