Skip to content

feat: install postgres in docker with oms#552

Draft
joka134 wants to merge 12 commits into
mainfrom
feat/install-postgres-command
Draft

feat: install postgres in docker with oms#552
joka134 wants to merge 12 commits into
mainfrom
feat/install-postgres-command

Conversation

@joka134

@joka134 joka134 commented Jul 1, 2026

Copy link
Copy Markdown
Member

No description provided.

joka134 and others added 12 commits July 1, 2026 11:34
Signed-off-by: joka134 <27293650+joka134@users.noreply.github.com>
Logging every extracted file leads to a verbose output without value
Allow dependency installation to load prod.vault.yaml from
config.secrets.baseDir when --vault is not provided.
* Also update help output to suggest lite packages

---------

Signed-off-by: NautiluX <2600004+NautiluX@users.noreply.github.com>
Co-authored-by: NautiluX <2600004+NautiluX@users.noreply.github.com>
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [google.golang.org/grpc](https://redirect.github.com/grpc/grpc-go) |
`v1.81.1` → `v1.82.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/google.golang.org%2fgrpc/v1.82.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/google.golang.org%2fgrpc/v1.81.1/v1.82.0?slim=true)
|

---

### Release Notes

<details>
<summary>grpc/grpc-go (google.golang.org/grpc)</summary>

###
[`v1.82.0`](https://redirect.github.com/grpc/grpc-go/releases/tag/v1.82.0):
Release 1.82.0

[Compare
Source](https://redirect.github.com/grpc/grpc-go/compare/v1.81.1...v1.82.0)

### Behavior Changes

- server: Remove support for
`GRPC_GO_EXPERIMENTAL_DISABLE_STRICT_PATH_CHECKING` environment
varibale. Strict incoming RPC path validation (which has been the
default since `v1.79.3`) can no longer be disabled.
([#&#8203;9112](https://redirect.github.com/grpc/grpc-go/issues/9112))
- transport: Add environment variable to change the default max header
list size from `16MB` to `8KB`. This may be enabled by setting
`GRPC_GO_EXPERIMENTAL_ENABLE_8KB_DEFAULT_HEADER_LIST_SIZE=true`. This
will be enabled by default in a subsequent release.
([#&#8203;9019](https://redirect.github.com/grpc/grpc-go/issues/9019))
- balancer: Load Balancing policy registry is now case-sensitive. Set
`GRPC_GO_EXPERIMENTAL_CASE_SENSITIVE_BALANCER_REGISTRIES=false` (and
file an issue) to revert to case-insensitive behavior.
([#&#8203;9017](https://redirect.github.com/grpc/grpc-go/issues/9017))

### New Features

- experimental/stats: Expose a new API, `NewContextWithLabelCallback`,
to register a callback that is invoked when telemetry labels are added.
([#&#8203;8877](https://redirect.github.com/grpc/grpc-go/issues/8877))
- Special Thanks:
[@&#8203;seth-epps](https://redirect.github.com/seth-epps)
- client: Return a portion of the response body in the error message,
when the client receives an unexpected non-gRPC HTTP response, to make
debugging easier.
([#&#8203;8929](https://redirect.github.com/grpc/grpc-go/issues/8929))
- Special Thanks:
[@&#8203;chengxilo](https://redirect.github.com/chengxilo)
- server: Add environment variable `GRPC_GO_SERVER_GOROUTINE_LABELS`
that controls setting `runtime/pprof.Labels` on goroutines spawned by
the server. Set `GRPC_GO_SERVER_GOROUTINE_LABELS=grpc.method=true` to
add the `grpc.method` label on goroutines spawned to handle incoming
requests.
([#&#8203;9082](https://redirect.github.com/grpc/grpc-go/issues/9082))
- Special Thanks: [@&#8203;dfinkel](https://redirect.github.com/dfinkel)

### Bug Fixes

- xds/server: Fix a memory leak of HTTP filter instances occurring when
route configurations are updated in-place during a Route Discovery
Service (RDS) update.
([#&#8203;9138](https://redirect.github.com/grpc/grpc-go/issues/9138))
- grpc: In the deprecated `gzip` Compressor (used via the deprecated
`WithCompressor` dial option), enforce the `MaxRecvMsgSize` limit on the
decompressed message buffer, preventing excessive memory allocation from
highly compressed payloads.
([#&#8203;9114](https://redirect.github.com/grpc/grpc-go/issues/9114))
- Special Thanks:
[@&#8203;evilgensec](https://redirect.github.com/evilgensec)
- stats/opentelemetry: Record retry attempts,
`grpc.previous-rpc-attempts`, at the call level and not the attempt
level.
([#&#8203;8923](https://redirect.github.com/grpc/grpc-go/issues/8923))
- encoding: Ensure `Close()` is always called on readers returned from
`Compressor.Decompress` if possible.
([#&#8203;9135](https://redirect.github.com/grpc/grpc-go/issues/9135))
- channelz: Fix the `LastMessageSentTimestamp` and
`LastMessageReceivedTimestamp` fields in `SocketMetrics` to ensure they
contain correct timestamp values.
([#&#8203;9109](https://redirect.github.com/grpc/grpc-go/issues/9109))

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yMTYuNCIsInVwZGF0ZWRJblZlciI6IjQzLjIxNi40IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
|
[google.golang.org/api](https://redirect.github.com/googleapis/google-api-go-client)
| `v0.286.0` → `v0.287.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/google.golang.org%2fapi/v0.287.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/google.golang.org%2fapi/v0.286.0/v0.287.0?slim=true)
|

---

### Release Notes

<details>
<summary>googleapis/google-api-go-client
(google.golang.org/api)</summary>

###
[`v0.287.0`](https://redirect.github.com/googleapis/google-api-go-client/releases/tag/v0.287.0)

[Compare
Source](https://redirect.github.com/googleapis/google-api-go-client/compare/v0.286.0...v0.287.0)

##### Features

- **all:** Auto-regenerate discovery clients
([#&#8203;3635](https://redirect.github.com/googleapis/google-api-go-client/issues/3635))
([504873e](https://redirect.github.com/googleapis/google-api-go-client/commit/504873e45d4a0993065311ed3f6a0467f2c41ab1))
- **all:** Auto-regenerate discovery clients
([#&#8203;3637](https://redirect.github.com/googleapis/google-api-go-client/issues/3637))
([5c975be](https://redirect.github.com/googleapis/google-api-go-client/commit/5c975bee9f05d3c570eb0d95be248f3cb418739f))
- **all:** Auto-regenerate discovery clients
([#&#8203;3639](https://redirect.github.com/googleapis/google-api-go-client/issues/3639))
([9737c4b](https://redirect.github.com/googleapis/google-api-go-client/commit/9737c4bf678023b300958b55d1548a902ff36c5d))

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yMTYuNCIsInVwZGF0ZWRJblZlciI6IjQzLjIxNi40IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->
…vault add unwrapSOPSData function to handle SOPS data extraction (#539)

This pull request introduces several improvements and fixes related to
handling kubeconfig storage, SOPS-encrypted vault data, and associated
tests. The main changes ensure that kubeconfig files are stored without
unwanted trailing newlines, add robust handling for SOPS-encrypted YAML
files by unwrapping top-level `data` wrappers, and enhance testing to
validate these behaviors.

**Kubeconfig storage improvements:**

* Trailing newlines are now trimmed from the kubeconfig content before
storing it in the vault, preventing YAML formatting issues such as the
use of `|+` chomping.
* Tests were updated and extended to verify that trailing newlines are
properly removed and to ensure the vault file does not contain unwanted
YAML formatting.

**SOPS/YAML handling improvements:**

* Added the `unwrapSOPSData` function to automatically strip a top-level
`data` block scalar wrapper from SOPS-encrypted YAML files, ensuring the
vault parser receives the intended document structure.
* Integrated the unwrapping logic into the vault data parser and made
the function available for testing.
* Added comprehensive unit tests for `unwrapSOPSData` to verify correct
behavior with various YAML inputs, including normal, wrapped, and
invalid documents.

[Clickup](https://app.clickup.com/t/24560134/869dwweda)
Also enabled `workspace-ssh` preview flag by default (was handed over to
SRE yesterday).

---------

Signed-off-by: Nathanael Ruf <nathanael@codesphere.com>
Signed-off-by: joka134 <27293650+joka134@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

6 participants