Protect system PostgreSQL databases from automatic major version upgrades
by introducing centralized ClusterImageCatalog resources based on official
CNPG artifacts repository.
Changes:
- Add two ClusterImageCatalog resources (bookworm and trixie OS variants)
- Based on CNPG official standard images with PostgreSQL 13-17 support
- PostgreSQL 18 excluded to prevent auto-upgrades
- Replace hardcoded imageName with imageCatalogRef in all system databases
- Add Makefile target 'update-image-catalogs' for automated catalog updates
System components using catalogs:
- keycloak-db → postgresql-bookworm major 17
- harbor-db → postgresql-bookworm major 17
- grafana-db → postgresql-bookworm major 17
- alerta-db → postgresql-bookworm major 17
- seaweedfs-db → postgresql-bookworm major 17
Benefits:
- Catalogs deploy with operator, always available before cluster changes
- Standard images include additional extensions (pgaudit, etc.)
- Support for both Debian bookworm and trixie
- Automated updates via 'make update-image-catalogs'
- Changes propagate through OCIRepo without manual migrations
Signed-off-by: IvanHunters <xorokhotnikov@gmail.com>
IvanHunters
a0ddacd037