Merge branch 'chore/update-all-component-versions-0.15' into 'main'

chore: bump component versions for 0.15

Closes #157

See merge request postgres-ai/postgresai!218

Author: Sarumyan

.gitlab-ci.yml

@@ -810,7 +810,7 @@ integration:xmin-horizon:
       test -n "$NETWORK"
       target_ready=0
       for i in {1..60}; do
-        if docker run --rm --network "$NETWORK" postgres:15 pg_isready -h target-db -U postgres; then
+        if docker run --rm --network "$NETWORK" postgres:17 pg_isready -h target-db -U postgres; then
           target_ready=1
           break
         fi
@@ -819,7 +819,7 @@ integration:xmin-horizon:
       test "$target_ready" = "1"
       monitor_ready=0
       for i in {1..60}; do
-        if docker run --rm --network "$NETWORK" postgres:15 \
+        if docker run --rm --network "$NETWORK" postgres:17 \
           psql "postgresql://monitor:monitor_pass@target-db:5432/target_database" -c 'select 1'; then
           monitor_ready=1
           break
@@ -830,7 +830,7 @@ integration:xmin-horizon:
       docker compose up -d target-standby
       standby_ready=0
       for i in {1..60}; do
-        if docker run --rm --network "$NETWORK" postgres:15 pg_isready -h target-standby -U postgres; then
+        if docker run --rm --network "$NETWORK" postgres:17 pg_isready -h target-standby -U postgres; then
           standby_ready=1
           break
         fi
@@ -839,7 +839,7 @@ integration:xmin-horizon:
       test "$standby_ready" = "1"
       standby_recovery_ready=0
       for i in {1..60}; do
-        if docker run --rm --network "$NETWORK" postgres:15 \
+        if docker run --rm --network "$NETWORK" postgres:17 \
           psql "postgresql://postgres:postgres@target-standby:5432/target_database" -tAc 'select pg_is_in_recovery()' | grep -qx t; then
           standby_recovery_ready=1
           break

.pre-commit-config.yaml

@@ -15,6 +15,9 @@ repos:
       # Ensure YAML files are valid
       - id: check-yaml
         args: ['--allow-multiple-documents']
+        # Skip Helm chart templates: they contain Go templating ({{- ... }})
+        # at the top of the file which is not valid YAML until rendered.
+        exclude: '^postgres_ai_helm/templates/'
       # Prevent committing to main directly
       - id: no-commit-to-branch
         args: ['--branch', 'main']

TMP_MON_PREVIEWS.md

@@ -347,7 +347,7 @@ echo "[$(date)] Workload generator stopped gracefully"
 
 ```yaml
 workload-generator:
-  image: postgres:15
+  image: postgres:17
   depends_on:
     target-db:
       condition: service_healthy
@@ -1172,7 +1172,7 @@ Using Compose v2 native limits (`mem_limit`, `cpus`), NOT `deploy.resources`.
 # docker-compose.preview.template.yml (excerpt)
 services:
   grafana:
-    image: grafana/grafana:12.0.2
+    image: grafana/grafana:12.3.2
     mem_limit: 256m
     cpus: 0.25
     healthcheck:
@@ -1185,7 +1185,7 @@ services:
       - "pgai.preview=true"
 
   victoria-metrics:
-    image: victoriametrics/victoria-metrics:v1.105.0
+    image: victoriametrics/victoria-metrics:v1.140.0
     mem_limit: 768m
     cpus: 0.4
     command:
@@ -1199,7 +1199,7 @@ services:
       - "pgai.preview=true"
 
   target-db:
-    image: postgres:15
+    image: postgres:17
     mem_limit: 512m
     cpus: 0.3
     healthcheck:
@@ -1348,7 +1348,7 @@ version: "3.8"
 
 services:
   node-exporter:
-    image: prom/node-exporter:v1.8.2
+    image: prom/node-exporter:v1.11.1
     restart: unless-stopped
     volumes:
       - /proc:/host/proc:ro

config/grafana/provisioning/datasources/datasources.yml

@@ -12,7 +12,9 @@ datasources:
       password: pgwatchadmin
     jsonData:
       sslmode: disable
-      postgresVersion: 1500
+      # Grafana encoding: PG major version * 100 (1700 = PG 17). PG 17 is
+      # not in Grafana's official dropdown yet; this value overrides it.
+      postgresVersion: 1700
     isDefault: false
 
   - name: PGWatch-Prometheus
@@ -38,4 +40,4 @@ datasources:
     isDefault: false
     jsonData:
       auth_method: none
-      allowed_hosts: []
+      allowed_hosts: []

config/scripts/postgres-entrypoint.sh

@@ -31,6 +31,50 @@ copy_init_files() {
   shopt -u nullglob
 }
 
+# Fail fast with an actionable message if the on-disk PGDATA major version
+# does not match the container image. Without this, postgres crash-loops
+# with only "database files are incompatible with server" buried in the
+# logs, which hides the real upgrade-path instruction from operators
+# running `postgres-ai mon update` against an existing PG 15 volume.
+check_pgdata_version() {
+  local data_dir="${PGDATA:-/var/lib/postgresql/data}"
+  local version_file="${data_dir}/PG_VERSION"
+
+  if [[ ! -f "${version_file}" ]]; then
+    return 0  # empty PGDATA: initdb will run on first start
+  fi
+
+  local on_disk image
+  on_disk="$(tr -d '[:space:]' < "${version_file}")"
+  image="$(postgres --version | awk '{print $3}' | cut -d. -f1)"
+
+  if [[ -n "${on_disk}" && "${on_disk}" != "${image}" ]]; then
+    cat >&2 <<EOF
+=======================================================================
+PostgreSQL version mismatch — refusing to start.
+
+  Data directory PG version: ${on_disk}
+  Container image PG version: ${image}
+
+PostgreSQL on-disk format is not compatible across major versions.
+Starting postgres now would crash-loop. The data is NOT lost; it is
+simply unreadable by this image version.
+
+To upgrade an existing PG ${on_disk} data directory to PG ${image}:
+  1. Stop this container.
+  2. Run pg_upgrade per the PostgresAI runbook (tracked in MR !145),
+     OR start the previous PG ${on_disk} image, take a logical dump,
+     then restore into a fresh PG ${image} volume.
+
+For standbys: do NOT pg_upgrade the replica. Instead, pg_upgrade the
+primary first, then re-clone the standby via pg_basebackup from the
+upgraded primary.
+=======================================================================
+EOF
+    exit 3
+  fi
+}
+
 main() {
   if [[ $# -lt 1 ]]; then
     echo "postgres-entrypoint: missing <config_subdir>" >&2
@@ -40,11 +84,10 @@ main() {
   local config_subdir="$1"
   shift
 
+  check_pgdata_version
   copy_init_files "${CONFIGS_ROOT}/${config_subdir}"
 
   exec docker-entrypoint.sh postgres "$@"
 }
 
 main "$@"
-
-

docker-compose.yml

@@ -31,7 +31,7 @@ services:
 
   # Target Database - The PostgreSQL database being monitored (demo only)
   target-db:
-    image: postgres:15
+    image: postgres:17
     container_name: target-db
     cpus: 0.2
     mem_limit: 768m
@@ -69,7 +69,7 @@ services:
 
   # Hot standby used by xmin-horizon integration coverage when explicitly started.
   target-standby:
-    image: postgres:15
+    image: postgres:17
     container_name: target-standby
     cpus: 0.2
     mem_limit: 768m
@@ -106,7 +106,7 @@ services:
   # and postgres-exporter connectivity without compromising security since
   # the database is not exposed externally.
   sink-postgres:
-    image: postgres:15
+    image: postgres:17
     container_name: sink-postgres
     cpus: 0.4
     mem_limit: 1024m
@@ -131,7 +131,7 @@ services:
 
   # VictoriaMetrics Sink - Storage for metrics in Prometheus format
   sink-prometheus:
-    image: victoriametrics/victoria-metrics:v1.105.0
+    image: victoriametrics/victoria-metrics:v1.140.0
     container_name: sink-prometheus
     cpus: 0.75
     mem_limit: 1536m
@@ -158,7 +158,7 @@ services:
 
   # PGWatch Instance 1 - Monitoring service (Postgres sink)
   pgwatch-postgres:
-    image: cybertecpostgresql/pgwatch:3
+    image: cybertecpostgresql/pgwatch:4.1.0
     container_name: pgwatch-postgres
     cpus: 0.35
     mem_limit: 512m
@@ -181,7 +181,7 @@ services:
 
   # PGWatch Instance 2 - Monitoring service (Prometheus sink)
   pgwatch-prometheus:
-    image: cybertecpostgresql/pgwatch:3
+    image: cybertecpostgresql/pgwatch:4.1.0
     container_name: pgwatch-prometheus
     cpus: 1.5
     mem_limit: 1024m
@@ -204,7 +204,7 @@ services:
 
   # Grafana with datasources - Visualization layer
   grafana:
-    image: grafana/grafana:12.0.2
+    image: grafana/grafana:12.3.2
     container_name: grafana-with-datasources
     cpus: 0.5
     mem_limit: 512m
@@ -297,8 +297,10 @@ services:
   # Self-monitoring components (may have reduced functionality on macOS)
 
   # cAdvisor - Container metrics (self-monitoring)
+  # Note: ghcr.io/google/cadvisor tags omit the 'v' prefix
+  # (upstream registry convention; different from other images here).
   self-cadvisor:
-    image: gcr.io/cadvisor/cadvisor:v0.51.0
+    image: ghcr.io/google/cadvisor:0.56.2
     container_name: self-cadvisor
     cpus: 0.15
     mem_limit: 192m
@@ -317,7 +319,7 @@ services:
 
   # Node Exporter - System metrics (self-monitoring)
   self-node-exporter:
-    image: prom/node-exporter:v1.8.2
+    image: prom/node-exporter:v1.11.1
     container_name: self-node-exporter
     cpus: 0.05
     mem_limit: 96m
@@ -330,7 +332,7 @@ services:
 
   # Postgres Exporter - Metrics for sink-postgres (self-monitoring)
   self-postgres-exporter:
-    image: prometheuscommunity/postgres-exporter:v0.16.0
+    image: prometheuscommunity/postgres-exporter:v0.19.1
     container_name: self-postgres-exporter
     cpus: 0.1
     mem_limit: 128m

postgres_ai_helm/templates/grafana-datasources.yaml

@@ -35,7 +35,9 @@ data:
         jsonData:
           database: {{ .Values.sinkPostgres.database }}
           sslmode: disable
-          postgresVersion: 1500
+          # Grafana encoding: PG major version * 100 (1700 = PG 17). PG 17
+          # is not in Grafana's official dropdown yet; this value overrides it.
+          postgresVersion: 1700
         secureJsonData:
           password: {{ .Values.secrets.postgres.password }}
       {{- if .Values.flask.enabled }}
@@ -50,5 +52,3 @@ data:
           tlsSkipVerify: true
       {{- end }}
 {{- end }}
-
-

postgres_ai_helm/templates/sink-postgres-statefulset.yaml

@@ -23,6 +23,52 @@ spec:
       imagePullSecrets:
         {{- toYaml . | nindent 8 }}
       {{- end }}
+      initContainers:
+        # Fail fast with an actionable message if the on-disk PGDATA major
+        # version does not match the image. Without this, postgres crash-
+        # loops with only "database files are incompatible with server"
+        # buried in the logs, and `helm upgrade` against an existing PG 15
+        # PVC surfaces as a generic pod CrashLoopBackOff.
+        - name: pg-version-guard
+          image: {{ .Values.sinkPostgres.image }}
+          imagePullPolicy: IfNotPresent
+          env:
+            - name: PGDATA
+              value: /var/lib/postgresql/data/pgdata
+          command: ["bash", "-c"]
+          args:
+            - |
+              set -Eeuo pipefail
+              version_file="${PGDATA}/PG_VERSION"
+              if [[ ! -f "${version_file}" ]]; then
+                exit 0  # empty PGDATA: initdb will run on first start
+              fi
+              on_disk="$(tr -d '[:space:]' < "${version_file}")"
+              image="$(postgres --version | awk '{print $3}' | cut -d. -f1)"
+              if [[ -n "${on_disk}" && "${on_disk}" != "${image}" ]]; then
+                cat >&2 <<EOF
+              =======================================================================
+              PostgreSQL version mismatch — refusing to start.
+
+                PVC PG version:   ${on_disk}
+                Image PG version: ${image}
+
+              On-disk format is not compatible across majors. Starting postgres
+              now would crash-loop. Data is NOT lost; it is simply unreadable
+              by this image version.
+
+              Upgrade path (see PostgresAI MR !145 runbook):
+                1. Scale this StatefulSet to 0.
+                2. Run pg_upgrade against the PVC from PG ${on_disk} to PG ${image},
+                   OR dump-and-restore into a fresh PVC.
+                3. Scale back to 1.
+              =======================================================================
+              EOF
+                exit 3
+              fi
+          volumeMounts:
+            - name: data
+              mountPath: /var/lib/postgresql/data
       containers:
         - name: postgres
           image: {{ .Values.sinkPostgres.image }}
@@ -70,5 +116,3 @@ spec:
         resources:
           requests:
             storage: {{ .Values.storage.postgresSize }}
-
-