Upgrade PostgreSQL in Sonarqube helm chart

Hi,

I’d like to upgrade PostgreSQL to version 15, but the Sonarqube helm chart has a dependency on the 10.15.0 Bitnami PostgreSQL helm chart. This works with version 11.14.0 of PostgreSQL which was released in November 2021 - just about 2 years old.

Are there any plans to update this dependency?

Thanks

Hi,

Welcome to the community!

What version of SonarQube are we talking about? Also, if we haven’t done it already, I know we’re planning to drop that default Postgres instance.

 
Ann

Hi,

The helm chart is using Version 10.2.0 of Sonarqube. If the plan is to drop that version of Postgres then it’s even more important for the helm chart to be updated.

The helm chart is owned by SonarSource:

Thanks
Sophie

Hello @shcarsten, welcome!

Thank you for taking the time to report this. We are aware that the dependency is outdated. This dependency is actually deprecated, and we advise users to be careful with it and use a well-maintained database as a service or deploy their database instead of relying on Bitnami Postgres.

Nevertheless, we do support PostgreSQL 15. Just a friendly reminder to double check our upgrade guide, as we do have some tips for PostgreSQL clean-up. :slight_smile:

3 Likes

Found Update PostgreSQL chart to fix CVE-2024-7348 by vonhutrong · Pull Request #556 · SonarSource/helm-chart-sonarqube · GitHub

I personnally think it’s a huge mistake to drop this dependency instead to update it and write a migration path (or at least communicate about breaking change)

When I deploy a chart I want all it’s dependency added. Not connect to an external Postgres (on K8S or not).

We are personnaly running our SonarQube Postgres on K8S (with rook-cepth storage). We didn’t faceed any incident or any issue. Deploying databases on K8S start to be more and more accepted easier to operate

Please reconsider this choice

2 Likes