sourcegraph · DaedalusG · Feb 11, 2025 · Feb 12, 2025 · Feb 24, 2025
diff --git a/base/blobstore/blobstore.Deployment.yaml b/base/blobstore/blobstore.Deployment.yaml
@@ -26,7 +26,7 @@ spec:
     spec:
       containers:
       - name: blobstore
-        image: index.docker.io/sourcegraph/blobstore:5.9.347@sha256:aed5ade110f16b36237c040ffc787e73237e109f0b1341aaa608c44eae48004b
+        image: us-central1-docker.pkg.dev/sourcegraph-ci/rfc795-internal/blobstore:6.1.1295@sha256:2fc0d3f05b75084cc79571064498f1a9321d40c42670d557a2e7f42b2c9848b0
         terminationMessagePolicy: FallbackToLogsOnError
         ports:
         - containerPort: 9000

diff --git a/base/cadvisor/cadvisor.DaemonSet.yaml b/base/cadvisor/cadvisor.DaemonSet.yaml
@@ -26,7 +26,7 @@ spec:
       serviceAccountName: cadvisor
       containers:
       - name: cadvisor
-        image: index.docker.io/sourcegraph/cadvisor:5.9.347@sha256:4f2a2c550f4cdfeca0d87cf607d75d356f3be6a32132fa88cdbb3e086ae6429a
+        image: us-central1-docker.pkg.dev/sourcegraph-ci/rfc795-internal/cadvisor:6.1.1295@sha256:141b730c6a7b1da7e3afa2b6b55b184e8bf32e89aa26160ee761a1c409549163
         args:
         # Kubernetes-specific flags below (other flags are baked into the Docker image)
         #

diff --git a/base/codeinsights-db/codeinsights-db.Deployment.yaml b/base/codeinsights-db/codeinsights-db.Deployment.yaml
@@ -26,7 +26,7 @@ spec:
     spec:
       initContainers:
       - name: correct-data-dir-permissions
-        image: index.docker.io/sourcegraph/alpine-3.14:5.9.347@sha256:b4d78b475c4eb1fa4e592338bf619939d574b0ac7056df4d96533748c5c06560
+        image: us-central1-docker.pkg.dev/sourcegraph-ci/rfc795-internal/alpine-3.14:6.1.1295@sha256:5551722b2ba1424d00e0735773c8fbcf7fd350c49f8865b4f9675a2a35abd2f1
         command: ["sh", "-c", "if [ -d /var/lib/postgresql/data/pgdata ]; then chmod 750 /var/lib/postgresql/data/pgdata; fi"]
         volumeMounts:
         - mountPath: /var/lib/postgresql/data/
@@ -42,7 +42,7 @@ spec:
             memory: "50Mi"
       containers:
       - name: codeinsights
-        image: index.docker.io/sourcegraph/codeinsights-db:5.9.347@sha256:dfe1d4f308ae27baddf144ceb7249b653af6c6cdd731a82e3a36741a7a939e94
+        image: us-central1-docker.pkg.dev/sourcegraph-ci/rfc795-internal/codeinsights-db:6.1.1295@sha256:eae0b54f5deebe0a9028dcf972fea0d9cefdc63f90bcad9b3618d50482c7aba8
         env:
         - name: POSTGRES_DB
           value: postgres
@@ -75,7 +75,7 @@ spec:
           value: postgres://postgres:@localhost:5432/?sslmode=disable
         - name: PG_EXPORTER_EXTEND_QUERY_PATH
           value: /config/code_insights_queries.yaml
-        image: index.docker.io/sourcegraph/postgres_exporter:5.9.347@sha256:5ae8e30dc827e30154ca1c0d309b476e0298b354e877fe95f71b4c5130d1da33
+        image: us-central1-docker.pkg.dev/sourcegraph-ci/rfc795-internal/postgres_exporter:6.1.1295@sha256:eb41e15d936f5f5c054507eddb761108bd89e0f5d8c279a33dd90ab77669cfd8
         terminationMessagePolicy: FallbackToLogsOnError
         name: pgsql-exporter
         resources:

diff --git a/base/codeinsights-db/codeinsights-db.StatefulSet.yaml b/base/codeinsights-db/codeinsights-db.StatefulSet.yaml
@@ -0,0 +1,98 @@
+apiVersion: apps/v1
+kind: StatefulSet
+metadata:
+  annotations:
+    description: Code Insights Postgres DB instance.
+  labels:
+    app.kubernetes.io/component: codeinsights-db
+    deploy: sourcegraph
+    sourcegraph-resource-requires: no-cluster-admin
+  name: codeinsights-db
+spec:
+  replicas: 1
+  revisionHistoryLimit: 10
+  selector:
+    matchLabels:
+      app: codeinsights-db
+  serviceName: codeinsights-db
+  template:
+    metadata:
+      labels:
+        app: codeinsights-db
+        deploy: sourcegraph
+        group: backend
+    spec:
+      containers:
+      - env:
+        - name: POSTGRES_DB
+          value: postgres
+        - name: POSTGRES_PASSWORD
+          value: password
+        - name: POSTGRES_USER
+          value: postgres
+        - name: PGDATA
+          value: /var/lib/postgresql/data/pgdata
+        - name: POSTGRESQL_CONF_DIR
+          value: /conf
+        image: us-central1-docker.pkg.dev/sourcegraph-ci/rfc795-internal/postgresql-16-codeinsights:6.1.1295@sha256:bc83498752574240bdadc35217cc3f9260383cfad7837a574ea03072e013669b
+        name: codeinsights
+        ports:
+        - containerPort: 5432
+          name: codeinsights-db
+        securityContext:
+          allowPrivilegeEscalation: false
+          runAsGroup: 70
+          runAsUser: 70
+        terminationMessagePolicy: FallbackToLogsOnError
+        volumeMounts:
+        - mountPath: /var/lib/postgresql/data/
+          name: disk
+        - mountPath: /conf
+          name: codeinsights-conf
+      - env:
+        - name: DATA_SOURCE_NAME
+          value: postgres://postgres:@localhost:5432/?sslmode=disable
+        - name: PG_EXPORTER_EXTEND_QUERY_PATH
+          value: /config/code_insights_queries.yaml
+        image: us-central1-docker.pkg.dev/sourcegraph-ci/rfc795-internal/postgres_exporter:6.1.1295@sha256:eb41e15d936f5f5c054507eddb761108bd89e0f5d8c279a33dd90ab77669cfd8
+        name: pgsql-exporter
+        ports:
+        - containerPort: 9187
+          name: pgsql-exporter
+        terminationMessagePolicy: FallbackToLogsOnError
+      initContainers:
+      - command:
+        - sh
+        - -c
+        - if [ -d /var/lib/postgresql/data/pgdata ]; then chmod 750 /var/lib/postgresql/data/pgdata; fi
+        image: us-central1-docker.pkg.dev/sourcegraph-ci/rfc795-internal/alpine-3.14:6.1.1295@sha256:5551722b2ba1424d00e0735773c8fbcf7fd350c49f8865b4f9675a2a35abd2f1
+        name: correct-data-dir-permissions
+        resources:
+          limits:
+            cpu: 10m
+            memory: 50Mi
+          requests:
+            cpu: 10m
+            memory: 50Mi
+        securityContext:
+          allowPrivilegeEscalation: false
+          runAsGroup: 70
+          runAsUser: 70
+        volumeMounts:
+        - mountPath: /var/lib/postgresql/data/
+          name: disk
+      securityContext:
+        fsGroup: 70
+        fsGroupChangePolicy: OnRootMismatch
+        runAsUser: 70
+      terminationGracePeriodSeconds: 120
+      volumes:
+      - name: disk
+        persistentVolumeClaim:
+          claimName: codeinsights-db
+      - configMap:
+          defaultMode: 511
+          name: codeinsights-db-conf
+        name: codeinsights-conf
+  updateStrategy:
+    type: RollingUpdate
diff --git a/base/codeintel-db/codeintel-db.Deployment.yaml b/base/codeintel-db/codeintel-db.Deployment.yaml
@@ -27,7 +27,7 @@ spec:
     spec:
       initContainers:
       - name: correct-data-dir-permissions
-        image: index.docker.io/sourcegraph/alpine-3.14:5.9.347@sha256:b4d78b475c4eb1fa4e592338bf619939d574b0ac7056df4d96533748c5c06560
+        image: us-central1-docker.pkg.dev/sourcegraph-ci/rfc795-internal/alpine-3.14:6.1.1295@sha256:5551722b2ba1424d00e0735773c8fbcf7fd350c49f8865b4f9675a2a35abd2f1
         command: ["sh", "-c", "if [ -d /data/pgdata-12 ]; then chmod 750 /data/pgdata-12; fi"]
         volumeMounts:
         - mountPath: /data
@@ -43,7 +43,7 @@ spec:
             memory: "50Mi"
       containers:
       - name: pgsql
-        image: index.docker.io/sourcegraph/codeintel-db:5.9.347@sha256:98399050651d0d0ba169693c82f254ad1c160e28d3a16c42e1b82bbc7f0cb9e5
+        image: us-central1-docker.pkg.dev/sourcegraph-ci/rfc795-internal/codeintel-db:6.1.1295@sha256:353662f48dbcd167712f98541b9cbe7215d661ccb601f631a3b5354249938acc
         terminationMessagePolicy: FallbackToLogsOnError
         readinessProbe:
           exec:
@@ -80,7 +80,7 @@ spec:
           value: postgres://sg:@localhost:5432/?sslmode=disable
         - name: PG_EXPORTER_EXTEND_QUERY_PATH
           value: /config/code_intel_queries.yaml
-        image: index.docker.io/sourcegraph/postgres_exporter:5.9.347@sha256:5ae8e30dc827e30154ca1c0d309b476e0298b354e877fe95f71b4c5130d1da33
+        image: us-central1-docker.pkg.dev/sourcegraph-ci/rfc795-internal/postgres_exporter:6.1.1295@sha256:eb41e15d936f5f5c054507eddb761108bd89e0f5d8c279a33dd90ab77669cfd8
         terminationMessagePolicy: FallbackToLogsOnError
         name: pgsql-exporter
         resources:

diff --git a/base/codeintel-db/codeintel-db.StatefulSet.yaml b/base/codeintel-db/codeintel-db.StatefulSet.yaml
@@ -0,0 +1,103 @@
+apiVersion: apps/v1
+kind: StatefulSet
+metadata:
+  annotations:
+    description: Postgres database for various data.
+    kubectl.kubernetes.io/default-container: pgsql
+  labels:
+    app.kubernetes.io/component: codeintel-db
+    deploy: sourcegraph
+    sourcegraph-resource-requires: no-cluster-admin
+  name: codeintel-db
+spec:
+  replicas: 1
+  revisionHistoryLimit: 10
+  selector:
+    matchLabels:
+      app: codeintel-db
+  serviceName: codeintel-db
+  template:
+    metadata:
+      labels:
+        app: codeintel-db
+        deploy: sourcegraph
+        group: backend
+    spec:
+      containers:
+      - image: us-central1-docker.pkg.dev/sourcegraph-ci/rfc795-internal/postgresql-16:6.1.1295@sha256:735d3b09cd62ab48d0040dd08ad3c97ae5d13abffae6c2ace7ee7698c25978f1
+        livenessProbe:
+          exec:
+            command:
+            - /liveness.sh
+          initialDelaySeconds: 15
+        name: pgsql
+        ports:
+        - containerPort: 5432
+          name: pgsql
+        readinessProbe:
+          exec:
+            command:
+            - /ready.sh
+        securityContext:
+          allowPrivilegeEscalation: false
+          runAsGroup: 999
+          runAsUser: 999
+        startupProbe:
+          exec:
+            command:
+            - /liveness.sh
+          failureThreshold: 360
+          periodSeconds: 10
+        terminationMessagePolicy: FallbackToLogsOnError
+        volumeMounts:
+        - mountPath: /data
+          name: disk
+        - mountPath: /conf
+          name: pgsql-conf
+      - env:
+        - name: DATA_SOURCE_NAME
+          value: postgres://sg:@localhost:5432/?sslmode=disable
+        - name: PG_EXPORTER_EXTEND_QUERY_PATH
+          value: /config/code_intel_queries.yaml
+        image: us-central1-docker.pkg.dev/sourcegraph-ci/rfc795-internal/postgres_exporter:6.1.1295@sha256:eb41e15d936f5f5c054507eddb761108bd89e0f5d8c279a33dd90ab77669cfd8
+        name: pgsql-exporter
+        ports:
+        - containerPort: 9187
+          name: pgsql-exporter
+        terminationMessagePolicy: FallbackToLogsOnError
+      initContainers:
+      - command:
+        - sh
+        - -c
+        - if [ -d /data/pgdata-12 ]; then chmod 750 /data/pgdata-12; fi
+        image: us-central1-docker.pkg.dev/sourcegraph-ci/rfc795-internal/alpine-3.14:6.1.1295@sha256:5551722b2ba1424d00e0735773c8fbcf7fd350c49f8865b4f9675a2a35abd2f1
+        name: correct-data-dir-permissions
+        resources:
+          limits:
+            cpu: 10m
+            memory: 50Mi
+          requests:
+            cpu: 10m
+            memory: 50Mi
+        securityContext:
+          allowPrivilegeEscalation: false
+          runAsGroup: 999
+          runAsUser: 999
+        volumeMounts:
+        - mountPath: /data
+          name: disk
+      securityContext:
+        fsGroup: 999
+        fsGroupChangePolicy: OnRootMismatch
+        runAsUser: 999
+      terminationGracePeriodSeconds: 120
+      volumes:
+      - name: disk
+        persistentVolumeClaim:
+          claimName: codeintel-db
+      - configMap:
+          defaultMode: 511
+          name: codeintel-db-conf
+        name: pgsql-conf
+  updateStrategy:
+    type: RollingUpdate
diff --git a/base/frontend/sourcegraph-frontend.Deployment.yaml b/base/frontend/sourcegraph-frontend.Deployment.yaml
@@ -29,7 +29,7 @@ spec:
     spec:
       initContainers:
       - name: migrator
-        image: index.docker.io/sourcegraph/migrator:5.9.347@sha256:a2a90a003c12643e40256dc4a3a80cd6a1854b67d487b5f8ef7a3cfb6b5a0c93
+        image: us-central1-docker.pkg.dev/sourcegraph-ci/rfc795-internal/migrator:6.1.1295@sha256:875d0eeea5866904667209adac4580369d299ccada5e2330d7e5c08433806c77
         args: ["up"]
         resources:
           limits:
@@ -63,7 +63,7 @@ spec:
           value: sg
       containers:
       - name: frontend
-        image: index.docker.io/sourcegraph/frontend:5.9.347@sha256:a6536c2379c05c6547910c5569dab5ddbc5b09a54219749bebcedfd550359cff
+        image: us-central1-docker.pkg.dev/sourcegraph-ci/rfc795-internal/frontend:6.1.1295@sha256:a292cf0a2ff1c8e4b3e3ae5546bdc15e860a7fba1742f3867d32a342f3b23928
         args:
         - serve
         env:

diff --git a/base/gitserver/gitserver.StatefulSet.yaml b/base/gitserver/gitserver.StatefulSet.yaml
@@ -35,7 +35,7 @@ spec:
               fieldPath: status.hostIP
         - name: OTEL_EXPORTER_OTLP_ENDPOINT
           value: http://$(OTEL_AGENT_HOST):4317
-        image: index.docker.io/sourcegraph/gitserver:5.9.347@sha256:ad4a27e69f33a9a38a53db0bd801ce6508bfebbc51b2af1e5a881b748742dab2
+        image: us-central1-docker.pkg.dev/sourcegraph-ci/rfc795-internal/gitserver:6.1.1295@sha256:8f2a5d843adc04e414a7d17a0a0e0194e12e1bfaaa2b31a193d02fa9d130b2ea
         terminationMessagePolicy: FallbackToLogsOnError
         livenessProbe:
           initialDelaySeconds: 5

diff --git a/base/grafana/grafana.StatefulSet.yaml b/base/grafana/grafana.StatefulSet.yaml
@@ -26,7 +26,7 @@ spec:
     spec:
       containers:
       - name: grafana
-        image: index.docker.io/sourcegraph/grafana:5.9.347@sha256:91d0076d075a461d9ff977f9d32b2c7b7e453869ee38f36ab147f0f3fe347a3f
+        image: us-central1-docker.pkg.dev/sourcegraph-ci/rfc795-internal/grafana:6.1.1295@sha256:f88a969ea3425ee06bf02ff53cfb56066143b27cb3c99ba4662d6e1dbc846ef1
         terminationMessagePolicy: FallbackToLogsOnError
         ports:
         - containerPort: 3370

diff --git a/base/indexed-search/indexed-search.StatefulSet.yaml b/base/indexed-search/indexed-search.StatefulSet.yaml
@@ -33,7 +33,7 @@ spec:
           value: http://$(OTEL_AGENT_HOST):4317
         - name: OPENTELEMETRY_DISABLED
           value: "false"
-        image: index.docker.io/sourcegraph/indexed-searcher:5.9.347@sha256:817141cc166702896fdf14f710b5d610042c0639e1dd2ea5a6ef572648fd8456
+        image: us-central1-docker.pkg.dev/sourcegraph-ci/rfc795-internal/indexed-searcher:6.1.1295@sha256:b07dbde5703771165438574444d31b164e6ebe4e2638ec66906fd2249ff2f404
         terminationMessagePolicy: FallbackToLogsOnError
         ports:
         - containerPort: 6070
@@ -67,7 +67,7 @@ spec:
           value: http://$(OTEL_AGENT_HOST):4317
         - name: OPENTELEMETRY_DISABLED
           value: "false"
-        image: index.docker.io/sourcegraph/search-indexer:5.9.347@sha256:2542aaa8fb7b418b94374c14797b90ad3b39688b324897b0adfc726d05a2ba48
+        image: us-central1-docker.pkg.dev/sourcegraph-ci/rfc795-internal/search-indexer:6.1.1295@sha256:d8cf48d25fabbc34b742f93e1ee55168d01a8db83d2a24e9f1b47c910d2d2c00
         terminationMessagePolicy: FallbackToLogsOnError
         ports:
         - containerPort: 6072

diff --git a/base/node-exporter/node-exporter.DaemonSet.yaml b/base/node-exporter/node-exporter.DaemonSet.yaml
@@ -24,7 +24,7 @@ spec:
     spec:
       containers:
       - name: node-exporter
-        image: index.docker.io/sourcegraph/node-exporter:5.9.347@sha256:43d70602b9f5a461fc6f137d743006605d18dab627b9961587fca499db721d7b
+        image: us-central1-docker.pkg.dev/sourcegraph-ci/rfc795-internal/node-exporter:6.1.1295@sha256:86618f697c0e4ee136c19d78cf629fe12c1595b56bdf6bd125403b586f934012
         imagePullPolicy: IfNotPresent
         resources:
           limits:

diff --git a/base/otel-collector/otel-agent.DaemonSet.yaml b/base/otel-collector/otel-agent.DaemonSet.yaml
@@ -26,7 +26,7 @@ spec:
     spec:
       containers:
         - name: otel-agent
-          image: index.docker.io/sourcegraph/opentelemetry-collector:5.9.347@sha256:78846526afae30eaebd0c598720f05490e64cc32534421357d2b40444bf56bfa
+          image: us-central1-docker.pkg.dev/sourcegraph-ci/rfc795-internal/opentelemetry-collector:6.1.1295@sha256:d29072c9a1b329b20811b05ac5047ad6e39894379725b66f0b706f9b73c57665
           command:
             - "/bin/otelcol-sourcegraph"
             - "--config=/etc/otel-agent/config.yaml"

diff --git a/base/otel-collector/otel-collector.Deployment.yaml b/base/otel-collector/otel-collector.Deployment.yaml
@@ -26,7 +26,7 @@ spec:
     spec:
       containers:
         - name: otel-collector
-          image: index.docker.io/sourcegraph/opentelemetry-collector:5.9.347@sha256:78846526afae30eaebd0c598720f05490e64cc32534421357d2b40444bf56bfa
+          image: us-central1-docker.pkg.dev/sourcegraph-ci/rfc795-internal/opentelemetry-collector:6.1.1295@sha256:d29072c9a1b329b20811b05ac5047ad6e39894379725b66f0b706f9b73c57665
           command:
             - "/bin/otelcol-sourcegraph"
             # To use a custom configuration, edit otel-collector.ConfigMap.yaml

diff --git a/base/pgsql/pgsql.Deployment.yaml b/base/pgsql/pgsql.Deployment.yaml
@@ -27,7 +27,7 @@ spec:
     spec:
       initContainers:
       - name: correct-data-dir-permissions
-        image: index.docker.io/sourcegraph/alpine-3.14:5.9.347@sha256:b4d78b475c4eb1fa4e592338bf619939d574b0ac7056df4d96533748c5c06560
+        image: us-central1-docker.pkg.dev/sourcegraph-ci/rfc795-internal/alpine-3.14:6.1.1295@sha256:5551722b2ba1424d00e0735773c8fbcf7fd350c49f8865b4f9675a2a35abd2f1
         command: ["sh", "-c", "if [ -d /data/pgdata-12 ]; then chmod 750 /data/pgdata-12; fi"]
         volumeMounts:
         - mountPath: /data
@@ -43,7 +43,7 @@ spec:
             memory: "50Mi"
       containers:
       - env:
-        image: index.docker.io/sourcegraph/postgres-12-alpine:5.9.347@sha256:98399050651d0d0ba169693c82f254ad1c160e28d3a16c42e1b82bbc7f0cb9e5
+        image: us-central1-docker.pkg.dev/sourcegraph-ci/rfc795-internal/postgres-12-alpine:6.1.1295@sha256:353662f48dbcd167712f98541b9cbe7215d661ccb601f631a3b5354249938acc
         terminationMessagePolicy: FallbackToLogsOnError
         readinessProbe:
           exec:
@@ -83,7 +83,7 @@ spec:
           value: postgres://sg:@localhost:5432/?sslmode=disable
         - name: PG_EXPORTER_EXTEND_QUERY_PATH
           value: /config/queries.yaml
-        image: index.docker.io/sourcegraph/postgres_exporter:5.9.347@sha256:5ae8e30dc827e30154ca1c0d309b476e0298b354e877fe95f71b4c5130d1da33
+        image: us-central1-docker.pkg.dev/sourcegraph-ci/rfc795-internal/postgres_exporter:6.1.1295@sha256:eb41e15d936f5f5c054507eddb761108bd89e0f5d8c279a33dd90ab77669cfd8
         terminationMessagePolicy: FallbackToLogsOnError
         name: pgsql-exporter
         resources: