feat(container)!: Update image postgresql to v14 - autoclosed

[bot-x-mod]

This PR contains the following updates:

Package	Update	Change
postgresql (source)	major	13.2.27 -> 14.3.3

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[bot-x-mod]

--- kubernetes/main/apps/home/postgresql/app Kustomization: flux-system/postgresql HelmRelease: home/hass-postgresql

+++ kubernetes/main/apps/home/postgresql/app Kustomization: flux-system/postgresql HelmRelease: home/hass-postgresql

@@ -13,13 +13,13 @@

     spec:
       chart: postgresql
       sourceRef:
         kind: HelmRepository
         name: bitnami
         namespace: flux-system
-      version: 13.2.27
+      version: 14.3.3
   install:
     createNamespace: true
     remediation:
       retries: 3
   interval: 10m
   maxHistory: 3

[bot-x-mod]

--- HelmRelease: home/hass-postgresql StatefulSet: home/hass-postgresql

+++ HelmRelease: home/hass-postgresql StatefulSet: home/hass-postgresql

@@ -26,13 +26,14 @@

       labels:
         app.kubernetes.io/instance: hass-postgresql
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/name: postgresql
         app.kubernetes.io/component: primary
     spec:
-      serviceAccountName: default
+      serviceAccountName: hass-postgresql
+      automountServiceAccountToken: false
       affinity:
         podAffinity: null
         podAntiAffinity:
           preferredDuringSchedulingIgnoredDuringExecution:
           - podAffinityTerm:
               labelSelector:
@@ -42,12 +43,15 @@

                   app.kubernetes.io/component: primary
               topologyKey: kubernetes.io/hostname
             weight: 1
         nodeAffinity: null
       securityContext:
         fsGroup: 1001
+        fsGroupChangePolicy: Always
+        supplementalGroups: []
+        sysctls: []
       hostNetwork: false
       hostIPC: false
       containers:
       - name: postgresql
         image: docker.io/bitnami/postgresql:16.1.0
         imagePullPolicy: IfNotPresent
@@ -55,14 +59,16 @@

           allowPrivilegeEscalation: false
           capabilities:
             drop:
             - ALL
           privileged: false
           readOnlyRootFilesystem: false
+          runAsGroup: 0
           runAsNonRoot: true
           runAsUser: 1001
+          seLinuxOptions: null
           seccompProfile:
             type: RuntimeDefault
         env:
         - name: BITNAMI_DEBUG
           value: 'false'
         - name: POSTGRESQL_PORT_NUMBER
@@ -127,23 +133,32 @@

             - /bin/sh
             - -c
             - -e
             - |
               exec pg_isready -U "hass-postgres" -d "dbname=hass" -h 127.0.0.1 -p 5432
               [ -f /opt/bitnami/postgresql/tmp/.initialized ] || [ -f /bitnami/postgresql/.initialized ]
-        resources:
-          limits: {}
-          requests:
-            cpu: 250m
-            memory: 256Mi
         volumeMounts:
+        - name: empty-dir
+          mountPath: /tmp
+          subPath: tmp-dir
+        - name: empty-dir
+          mountPath: /opt/bitnami/postgresql/conf
+          subPath: app-conf-dir
+        - name: empty-dir
+          mountPath: /opt/bitnami/postgresql/tmp
+          subPath: app-tmp-dir
+        - name: empty-dir
+          mountPath: /opt/bitnami/postgresql/logs
+          subPath: app-logs-dir
         - name: dshm
           mountPath: /dev/shm
         - name: data
           mountPath: /bitnami/postgresql
       volumes:
+      - name: empty-dir
+        emptyDir: {}
       - name: dshm
         emptyDir:
           medium: Memory
       - name: data
         persistentVolumeClaim:
           claimName: hass-postgresql-data-0
--- HelmRelease: home/hass-postgresql NetworkPolicy: home/hass-postgresql

+++ HelmRelease: home/hass-postgresql NetworkPolicy: home/hass-postgresql

@@ -0,0 +1,26 @@

+---
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+  name: hass-postgresql
+  namespace: home
+  labels:
+    app.kubernetes.io/instance: hass-postgresql
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: postgresql
+    app.kubernetes.io/component: primary
+spec:
+  podSelector:
+    matchLabels:
+      app.kubernetes.io/instance: hass-postgresql
+      app.kubernetes.io/name: postgresql
+      app.kubernetes.io/component: primary
+  policyTypes:
+  - Ingress
+  - Egress
+  egress:
+  - {}
+  ingress:
+  - ports:
+    - port: 5432
+
--- HelmRelease: home/hass-postgresql ServiceAccount: home/hass-postgresql

+++ HelmRelease: home/hass-postgresql ServiceAccount: home/hass-postgresql

@@ -0,0 +1,12 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: hass-postgresql
+  namespace: home
+  labels:
+    app.kubernetes.io/instance: hass-postgresql
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: postgresql
+automountServiceAccountToken: false
+