Skip to content

Conversation

@Shubham-astro
Copy link
Contributor

@Shubham-astro Shubham-astro commented Jan 6, 2026

Details

This PR migrates upstream pgbouncer exporter image to chainguard image. This PR sets explicit ENTRYPOINT and CMD to support dynamic credential injection via environment variables.

Related Issues

https://github.com/astronomer/issues/issues/8240

Testing

  • Confirmed pods were stable after chainguard usage:
Screenshot 2026-01-07 at 9 47 14 AM

Checklist

  • version.txt was updated

@Shubham-astro Shubham-astro marked this pull request as ready for review January 7, 2026 04:19
@Shubham-astro Shubham-astro requested review from a team as code owners January 7, 2026 04:19

# https://hub.docker.com/r/jbub/pgbouncer_exporter
FROM jbub/pgbouncer_exporter:v0.20.0 AS upstream
FROM cgr.dev/astronomer.io/prometheus-pgbouncer-exporter:v0.11.0 AS upstream
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
FROM cgr.dev/astronomer.io/prometheus-pgbouncer-exporter:v0.11.0 AS upstream
FROM cgr.dev/astronomer.io/prometheus-pgbouncer-exporter:v0.20.0 AS upstream

@pgvishnuram pgvishnuram changed the title Add pgbouncer CVE fix with chainguard Add pgbouncer exporter service CVE fix with chainguard base Jan 13, 2026
@pgvishnuram pgvishnuram changed the title Add pgbouncer exporter service CVE fix with chainguard base Add pgbouncer exporter service with chainguard base image Jan 13, 2026
Co-authored-by: pgvishnuram <81585115+pgvishnuram@users.noreply.github.com>

# https://hub.docker.com/r/jbub/pgbouncer_exporter
FROM jbub/pgbouncer_exporter:v0.20.0 AS upstream
FROM cgr.dev/astronomer.io/prometheus-pgbouncer-exporter:v0.11.0 AS upstream
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yikes, are we reverting from 0.20.0 to 0.11.0 ? Does chainguard not have a newer one? 0.11.0 is from 2021 https://github.com/jbub/pgbouncer_exporter/releases/tag/v0.11.0

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@danielhoherd looks like Chainguard is not matching its versioning with OSS upstream image versions?
In this case, should we just adopt Chainguard's version?

@rishkarajgi rishkarajgi changed the title Add pgbouncer exporter service with chainguard base image PINF-41 - Add pgbouncer exporter service with chainguard base image Jan 21, 2026
Copy link
Member

@danielhoherd danielhoherd left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We cannot use pgbouncer-exporter 0.11.0. it is incompatible with our version of pgbouncer 1.24 https://github.com/jbub/pgbouncer_exporter/releases/tag/v0.19.0

Slack thread: https://astronomer.slack.com/archives/C08CL6S53J6/p1769709287900579

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants