feat: bump to postgres v15.5

chart/templates/postgres.yaml

@@ -38,7 +38,7 @@ spec:
             mountPath: /dev/shm
       containers:
       - name: postgresql
-        image: docker.io/supabase/postgres:14.1.0.21
+        image: '{{.Values.db.image}}:{{.Values.db.tag}}'
         resources:
             {{- toYaml .Values.db.resources | nindent 12 }}
         env:
@@ -69,7 +69,6 @@ spec:
       resources:
         requests:
           storage: {{ .Values.db.storage }}
-
 ---
 apiVersion: v1
 kind: Service

chart/values.yaml

@@ -1,10 +1,12 @@
 replicas: 1
 # Use this only if you want to replace the default that is .Chart.Name as the name of all the objects.
 nameOverride: ""
+
 image:
   repository: docker.io/flanksource/incident-commander
   pullPolicy: IfNotPresent
   tag: "v0.0.409"
+
 global:
   ui:
     host: 'mission-control-ui.local'
@@ -14,17 +16,21 @@ global:
     tlsSecretName: ''
   otel:
     collector: ''
+
 serviceAccount:
   # Annotations to add to the service account
   annotations: {}
+
 extraArgs: {}
+
 externalPostgrest:
   enable: true
   tag: v10.1.0
   logLevel: info
   dbScema: public
   dbAnonRole: postgrest_anon
   maxRows: 2000
+
 # Specify the cel-go script or the file path to the cel script.
 # Script is used to map the user identity to the role & teams.
 identityRoleMapper:
@@ -35,6 +41,7 @@ identityRoleMapper:
     name: ""
     key: ""
     mountPath: "/etc/identity-role-mapper"
+
 # Configuration for pushing data to upstream
 # upstream_push:
 #   name: ''
@@ -43,18 +50,24 @@ identityRoleMapper:
 #   password: ''
 #   labels: 'key1=val1,key2=val2'
 upstream_push: {}
+
 # Allowed values are [none, kratos,clerk]
 authProvider: kratos
 clerkJWKSURL: ""
 clerkOrgID: ""
+
 otel:
   # OpenTelemetry gRPC collector endpoint in host:port format
   collector: '{{.Values.global.otel.collector}}'
   serviceName: "mission-control"
+
 # Properties to configure mission-control feature sets
 properties: {}
+
 db:
   create: true
+  image: supabase/postgres
+  tag: '15.1.0.151@sha256:512d034b03bf1349d451c867cc3eb650bfc2778deff4668619c71f751a0fc354'
   secretKeyRef:
     name: incident-commander-postgres
     key: DB_URL
@@ -75,7 +88,9 @@ smtp:
     # SMTP_PORT: <port>
     # SMTP_USER: <user>
     # SMTP_PASSWORD: <password>
+
 adminPassword: admin
+
 canary-checker:
   image:
     type: full
@@ -93,6 +108,7 @@ canary-checker:
   flanksource-ui:
     # Disable UI via canary-checker by default.
     enabled: false
+
 config-db:
   disablePostgrest: true
   db:
@@ -104,6 +120,7 @@ config-db:
       secretKeyRef:
         name: incident-commander-postgres
         key: DB_URL
+
 apm-hub:
   enabled: true
   db:
@@ -112,6 +129,7 @@ apm-hub:
       create: false
       name: incident-commander-postgres
       key: DB_URL
+
 # Enable ingress only if the UI is deployed outside of the cluster and calls public incident-commander api endpoint.
 ingress:
   enabled: false
@@ -123,6 +141,7 @@ ingress:
     - hosts:
         - "{{.Values.global.api.host}}"
       secretName: "{{.Values.global.api.tlsSecretName}}"
+
 flanksource-ui:
   enabled: true
   nameOverride: "incident-manager-ui"
@@ -137,6 +156,7 @@ flanksource-ui:
       - hosts:
           - "{{.Values.global.ui.host}}"
         secretName: "{{.Values.global.ui.tlsSecretName}}"
+
 # - if chart name (incident-commander) is changed, change the urls. E.g.
 # oryKratosURI url points to the incident-commander service with a suffix.
 #