Pigsty v2.0.1
v2 bug fixes, security enhancements, Grafana upgrade
v2 bug fixes, security enhancements, Grafana upgrade
Security improvements and bug fixes for v2.0.0.
Improvements
- New pig logo to comply with PostgreSQL trademark policy
- Grafana upgraded to v9.4 with better UI and bug fixes
- Patroni upgraded to v3.0.1 with bug fixes
- Grafana systemd service file reverted to rpm default
- Use slower
copyinstead ofrsyncfor Grafana dashboard sync, more reliable - Bootstrap now restores default repo files after execution
- Added asciinema videos for various admin tasks
- Security enhancement mode: restricted monitoring user permissions
- New config template:
dual.ymlfor two-node deployment - Enable
log_connectionsandlog_disconnectionsincrit.ymltemplate - Enable
$lib/passwordcheckinpg_libsincrit.ymltemplate - Explicitly grant
pg_monitorrole monitoring view permissions - Remove default
dbrole_readonlyfromdbuser_monitorto restrict monitoring user permissions - Patroni now listens on
{{ inventory_hostname }}instead of0.0.0.0 pg_listennow controls postgres/pgbouncer listen address${ip},${lo},${vip}placeholders now available inpg_listen- Aliyun terraform image upgraded from centos 7.9 to Rocky Linux 9
- Bytebase upgraded to v1.14.0
Bug Fixes
- Added missing advertise address for alertmanager
- Fixed missing
pg_modevariable when creating database users withbin/pgsql-user - Added
-a passwordoption for Redis cluster join task inredis.yml - Added missing default value in
infra-rm.yml.remove infra datatask - Fixed prometheus monitoring target definition file owner to
prometheususer - Use admin user instead of root to delete DCS metadata
- Fixed issue caused by Grafana 9.4 bug: missing Meta datasource