[DPE-5833] Create new PostgreSQL version 16 charm (#788)

* try using pg 16 rock

* try fix integration tests

* remove argument on helper

* more fixes

* fix test issues

* REVERT LATER: Adapt build_charm function

* remove base=CHARM_BASE from deploy

* remove juju 2.9 tests

* grat permissions to public schema

* fix linting and unit test

* try refactor the permissions change

* Update dependency uv to v0.5.27 (#847)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* grant public access to public schemas

* [DPE-6053] Fix ports (#846)

* Fix ports

Signed-off-by: Marcelo Henrique Neppel <[email protected]>

* Remove unused import

Signed-off-by: Marcelo Henrique Neppel <[email protected]>

* Remove unused charm library and fix unit tests

Signed-off-by: Marcelo Henrique Neppel <[email protected]>

* Fix identation

Signed-off-by: Marcelo Henrique Neppel <[email protected]>

* Bump libs

* Conditional set_ports logic

* Unit test

* Don't expect juju managed resources

---------

Signed-off-by: Marcelo Henrique Neppel <[email protected]>
Co-authored-by: Marcelo Henrique Neppel <[email protected]>

* mark smoke test as unstable

* test release charm to 16/edge

* fix test release workflow

* fix typo

* Sync docs from Discourse (#801)

Co-authored-by: GitHub Actions <41898282+github-actions[bot]@users.noreply.github.com>

* Update dependency uv to v0.5.29 (#848)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* [MISC] Define charm utility properties (#842)

* Update data-platform-workflows to v29.1.0 (#849)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* revert metadata.yaml

* nits

* Use `charmcraft test` & concierge (#852)

* [MISC] Split topology script (#853)

* Update charmcraft.yaml build tools (#851)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* Update dependency uv to v0.5.31 (#858)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* Update canonical/data-platform-workflows action to v30 (#859)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* Use _promote_charm.yaml (#860)

Use `charmcraft promote` and auto-generate release notes

* Update dependency cryptography to v44.0.1 [SECURITY] (#855)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* Sync docs from Discourse (#854)

Co-authored-by: GitHub Actions <41898282+github-actions[bot]@users.noreply.github.com>

* Update data-platform-workflows to v30.0.2 (#863)

* Update canonical/has-signed-canonical-cla action to v2 (#865)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* [DPE-5827] Set all nodes to synchronous replicas (#784)

* Update patroni configuration

* Update test assertion

* Copy update_synchronous_node_count from VM

* Add unit test

* Set sync node count during upgrade

* Fix tls test

* Switchover primary

* Add different helper to get leader

* Add config boilerplate

* Use config value when setting sync node count

* Escape tuple

* Add policy values

* Add integration test

* Fix casting

* Fix test

* Update to spec

* Bump retry timout

* Switch to planned units

* Fix generator

* Update conf description

* Spread task

* Pass the charm

* [DPE-6484] Add scope to promote to primary (#850)

* Promote unit action

* Tweaks for failing REST calls

* VM parity

* [MISC] Enable RBAC in tests (#861)

* Enable RBAC

* Bump cosl

* Add trust

* Bump libs

* [MISC] Define charm constants (#862)

* Lock file maintenance Python dependencies (#835)

* Lock file maintenance Python dependencies

* Backoff boto3 1.36

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Dragomir Penev <[email protected]>

* Update canonical/data-platform-workflows action to v30.1.3 (#856)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* Update charmcraft.yaml build tools (#868)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* Handle missing stanza output (#866)

* Update ghcr.io/canonical/charmed-postgresql:14.15-22.04_edge Docker digest to 71d49b6 (#870)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* [MISC] Disable storage test on arm (#872)

* Disable storage test on Arm

* Bump libs

* Correct import path

* Update charmcraft.yaml build tools (#871)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* [MISC] Add degraded status to primary message (#874)

* Add degraded status on to primary message

* Use const running tests

* [MISC] Sanitize PostgreSQL extra-user-roles arg (#876)

* [MISC] Fix PostgreSQL lib function signature (#879)

* [MISC] Skip backup tests without creds (#884)

* Bump libs

* Skip backups tests if no creds are set

* Check that the cloud config is set to a value

* Typo

* Update tests/integration/conftest.py

Co-authored-by: Carl Csaposs <[email protected]>

* Switch all checks to gets

* Typo

---------

Co-authored-by: Carl Csaposs <[email protected]>

* [DPE-6679] PostgreSQL Config Improvement (#867)

* config improvement

* config improvement

* config improvement

* config improvement

* config improvement

* config improvement

* config improvement

* config improvement

* config improvement

* config improvement

* Update dependency jinja2 to v3.1.6 [SECURITY] (#882)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* Update canonical/data-platform-workflows action to v30.2.0 (#887)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* Reduce required approvals on Renovate pull requests by 1 (#880)

* Update dependency uv to v0.6.5 (#878)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* Don't run juju2 and legacy tests

* Use correct charm

* Dual branch config

* Remove 14 specific tests

* Remove eer data secrets

* Skip upgrade from stable

* Upgrade on Noble

* Build and deploy noble

* Linting

* Disable pgaudit during tests

* Linting

* Use common deploy for smoke test

* Tweaks

* Remove legacy rels

* Tweak tests

* Cleanup markers

* Deploy without pgaudit in plugin tests

* Update ghcr.io/canonical/charmed-postgresql Docker tag to v14.17 (#877)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* Correct remove relation

* Bump rock

* Remove check for port forwarding

---------

Signed-off-by: Marcelo Henrique Neppel <[email protected]>
Co-authored-by: Lucas Gameiro Borges <[email protected]>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Dragomir Penev <[email protected]>
Co-authored-by: Marcelo Henrique Neppel <[email protected]>
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: Sinclert Pérez <[email protected]>
Co-authored-by: lucas.gameiro-borges <[email protected]>
Co-authored-by: Carl Csaposs <[email protected]>
Co-authored-by: Dragomir Penev <[email protected]>
Co-authored-by: Danylo Bereznenko <[email protected]>

Author: 10 people

.github/release.yaml

@@ -0,0 +1,8 @@
+changelog:
+  categories:
+    - title: Features
+      labels:
+        - enhancement
+    - title: Bug fixes
+      labels:
+        - bug

.github/renovate.json5

@@ -6,39 +6,15 @@
   reviewers: [
     'team:data-platform-postgresql',
   ],
+  "baseBranches": ["main", "/^*\\/edge$/"],
   packageRules: [
     {
       matchPackageNames: [
         'pydantic',
       ],
       allowedVersions: '<2.0.0',
     },
-    {
-      matchManagers: [
-        'custom.regex',
-      ],
-      matchDepNames: [
-        'juju',
-      ],
-      matchDatasources: [
-        'pypi',
-      ],
-      allowedVersions: '<3',
-      groupName: 'Juju agents',
-    },
   ],
   customManagers: [
-    {
-      customType: 'regex',
-      fileMatch: [
-        '^\\.github/workflows/[^/]+\\.ya?ml$',
-      ],
-      matchStrings: [
-        '(libjuju: )==(?<currentValue>.*?) +# renovate: latest libjuju 2',
-      ],
-      depNameTemplate: 'juju',
-      datasourceTemplate: 'pypi',
-      versioningTemplate: 'loose',
-    },
   ],
 }

.github/workflows/approve_renovate_pr.yaml

@@ -0,0 +1,15 @@
+# Copyright 2025 Canonical Ltd.
+# See LICENSE file for licensing details.
+name: Approve Renovate pull request
+
+on:
+  pull_request:
+    types:
+      - opened
+
+jobs:
+  approve-pr:
+    name: Approve Renovate pull request
+    uses: canonical/data-platform-workflows/.github/workflows/[email protected]
+    permissions:
+      pull-requests: write  # Needed to approve PR

.github/workflows/check_pr.yaml

@@ -0,0 +1,18 @@
+# Copyright 2025 Canonical Ltd.
+# See LICENSE file for licensing details.
+name: Check pull request
+
+on:
+  pull_request:
+    types:
+      - opened
+      - labeled
+      - unlabeled
+      - edited
+    branches:
+      - main
+
+jobs:
+  check-pr:
+    name: Check pull request
+    uses: canonical/data-platform-workflows/.github/workflows/[email protected]

.github/workflows/ci.yaml

@@ -27,7 +27,7 @@ on:
 jobs:
   lint:
     name: Lint
-    uses: canonical/data-platform-workflows/.github/workflows/lint.yaml@v29.0.5
+    uses: canonical/data-platform-workflows/.github/workflows/lint.yaml@v30.2.0
 
   unit-test:
     name: Unit test charm
@@ -49,46 +49,19 @@ jobs:
 
   build:
     name: Build charm
-    uses: canonical/data-platform-workflows/.github/workflows/[email protected]
+    uses: canonical/data-platform-workflows/.github/workflows/[email protected]
+    with:
+      cache: false
 
   integration-test:
-    strategy:
-      fail-fast: false
-      matrix:
-        juju:
-          - agent: 2.9.51  # renovate: juju-agent-pin-minor
-            libjuju: ==2.9.49.1  # renovate: latest libjuju 2
-            allure_on_amd64: false
-          - agent: 3.6.2  # renovate: juju-agent-pin-minor
-            allure_on_amd64: true
-        architecture:
-          - amd64
-        include:
-          - juju:
-              agent: 3.6.2  # renovate: juju-agent-pin-minor
-              allure_on_amd64: true
-            architecture: arm64
-    name: Integration | ${{ matrix.juju.agent }} | ${{ matrix.architecture }}
+    name: Integration test charm
     needs:
       - lint
       - unit-test
       - build
-    uses: canonical/data-platform-workflows/.github/workflows/integration_test_charm.yaml@v29.0.5
+    uses: ./.github/workflows/integration_test.yaml
     with:
       artifact-prefix: ${{ needs.build.outputs.artifact-prefix }}
-      architecture: ${{ matrix.architecture }}
-      cloud: microk8s
-      microk8s-snap-channel: 1.32-strict/stable  # renovate: latest microk8s
-      juju-agent-version: ${{ matrix.juju.agent }}
-      libjuju-version-constraint: ${{ matrix.juju.libjuju }}
-      _beta_allure_report: ${{ matrix.juju.allure_on_amd64 && matrix.architecture == 'amd64' }}
-    secrets:
-      integration-test: |
-        {
-          "AWS_ACCESS_KEY": "${{ secrets.AWS_ACCESS_KEY }}",
-          "AWS_SECRET_KEY": "${{ secrets.AWS_SECRET_KEY }}",
-          "GCP_ACCESS_KEY": "${{ secrets.GCP_ACCESS_KEY }}",
-          "GCP_SECRET_KEY": "${{ secrets.GCP_SECRET_KEY }}",
-        }
+    secrets: inherit
     permissions:
-      contents: write  # Needed for Allure Report beta
+      contents: write  # Needed for Allure Report

.github/workflows/cla-check.yml

@@ -9,4 +9,4 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - name: Check if Canonical's Contributor License Agreement has been signed
-        uses: canonical/has-signed-canonical-cla@v1
+        uses: canonical/has-signed-canonical-cla@v2