Skip to content

Commit 8ad4140

Browse files
authored
Update default memcached, redis, and pgbouncer versions to recent ones (#67)
* Update default memcached, redis, and pgbouncer versions to recent ones Using old versions results in both a) potential vulnerabilities in the server software itself b) certain and copius vulnerabilities in the base image from the old version Notes on these particualr upgrades: - memcached: 1.6.9 (2020-11-20) -> 1.6.38 (2025-03-19) 1.6.30 says "The builtin proxy has removed its old style lua API. There should be no active users of it, but if you use res = pool(r) or mcp.await syntax, please see the wiki documentation for updated API calls. This paves the way for many performance improvements." I didn't see any server version compatibility notes with pymemcache (NOT the only Python interface). - redis: 5.0.6 -> 7.4.3 redis 8 was released in the last couple of weeks and already has a recommended patch. Additionally it has a new license to consider. django-redis doesn't seem to care about the Redis version. redis-py says that our redis-py version 5.0.1 supports server "Version 5.0 to current". - pgbouncer: 1.18.0 (2022-12-12) -> 1.24.1 (2025-04-16) A "minor breaking change" is documented for pgbouncer 1.23.0: "If you relied on the old behaviour of SIGTERM in your Dockerfile or Systemd service file you should now use SIGQUIT." * add entry for changes to default service versions * add new version
1 parent 975e969 commit 8ad4140

File tree

2 files changed

+8
-3
lines changed

2 files changed

+8
-3
lines changed

CHANGES.rst

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -4,6 +4,11 @@ caktus.django-k8s
44
Changes
55
-------
66

7+
v1.10.0 on May 19, 2025
8+
~~~~~~~~~~~~~~~~~~~~~~~
9+
10+
* Update default version memcached to 1.6.38, pgbouncer to 1.24.1, and redis to 7.4.3.
11+
712
v1.9.0 on February 26, 2024
813
~~~~~~~~~~~~~~~~~~~~~
914

defaults/main.yml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -70,14 +70,14 @@ k8s_namespace: "echoserver"
7070
# k8s_storage_class_name: ""
7171

7272
k8s_memcached_enabled: false
73-
k8s_memcached_version: "1.6.9"
73+
k8s_memcached_version: "1.6.38"
7474
k8s_memcached_service_type: ClusterIP
7575
# If service_type is LoadBalancer, you can optionally assign a fixed IP for your
7676
# load balancer (if suppported by the provider):
7777
# k8s_memcached_load_balancer_ip: w.x.y.z
7878

7979
k8s_redis_enabled: false
80-
k8s_redis_version: "5.0.6"
80+
k8s_redis_version: "7.4.3"
8181
k8s_redis_volume_size: "20Gi"
8282
k8s_redis_service_type: ClusterIP
8383
# If service_type is LoadBalancer, you can optionally assign a fixed IP for your
@@ -86,7 +86,7 @@ k8s_redis_service_type: ClusterIP
8686

8787
k8s_pgbouncer_enabled: false
8888
k8s_pgbouncer_repo: "edoburu/pgbouncer"
89-
k8s_pgbouncer_version: "1.18.0"
89+
k8s_pgbouncer_version: "1.24.1"
9090
k8s_pgbouncer_replicas: 1
9191
# Mount a Certificate from the k8s_namespace to pgBouncer's /etc/pgbouncer/ssl/
9292
# directory to enable TLS mode to use for connections from clients

0 commit comments

Comments
 (0)