Add optional PXC database and CNPG cluster

jessebot commented

2026-09-08 11:47:08 +00:00

Owner

Minor coturn update

Updates appVersion to v4.18.0.

Upgrade notes

Three turnserver flags removed:
- --drop-invalid-packets (#2078)
- --no-dtls (#2079).
- --no-cli (#2079).
Log format: session id moved from session : prefix to (session ) suffix across 36 sites (#2072) — breaks anything anchored on the old prefix.
Wire behavior:
- ChannelBind-without-allocation now 437 not 400
- duplicate XOR-PEER-ADDRESS/DATA go first-wins
- attributes after MESSAGE-INTEGRITY ignored
- over-long USERNAME/REALM/NONCE rejected with 400 instead of truncated
- --external-ip applied per address family.

What's Changed

fix: shrink oversized stack frames in the test utilities by @eakraly in #2051
clamp software copy length in handle_old_stun_command by @alhudz in #2050
uclient: start the worker pools after session creation, not before by @eakraly in #2052
uclient: stamp per-send metadata into the packet, not a shared buffer by @eakraly in #2053
Ignore a duplicate DATA attribute in Send instead of discarding by @eakraly in #2046
Bind the first XOR-PEER-ADDRESS in ChannelBind, not the last by @eakraly in #2048
Size USERNAME, REALM and NONCE limits in bytes per RFC 8489 by @eakraly in #2047
Document RFC 8489 and RFC 8656 instead of only the specs they obsolete by @eakraly in #2049
don't release port 65535 when turnports_allocate fails by @alhudz in #2056
Build docker images with optimizations on by @eakraly in #2057
Advertise IPv6 allocations under their real relayed transport address by @eakraly in #2058
turnutils_peer: reflect DSCP/TOS on echoed datagrams by @eakraly in #2059
ci: guard against test-script hangs (timeout wrappers + job timeouts) by @eakraly in #2061
Log only the request line for web-admin HTTP requests by @eakraly in #2064
skip null memcpy on zero-length stun auth attribute by @alhudz in #2066
fix: external ip must valid if the provider responses EDNS by @tangxinfa in #2060
fix: shrink oversized stack frames flagged by MSVC C6262 by @eakraly in #2068
Log only the request line for web-admin HTTP requests by @eakraly in #2069
Make the multiplex-peer example tests request EVEN-PORT never @eakraly in #2070
Split unauthorized reason by @eakraly in #2065
Move session id out of log message prefixes by @eakraly in #2072
Silently ignore attributes after message-integrity by @fippo in #2075
Return allocation mismatch for ChannelBind without allocation by @pannal in #2067
reject 0x1f control character in SASLprep by @alhudz in #2074
hiredis: clean up failed async connection setup by @junkilee80 in #2073
Replace ubuntu 24.04 with 26.04LTS by @eakraly in #2076
Deprecate option drop-invalid-packets by @eakraly in #2078
Update help with missing arguments by @eakraly in #2079

Major Database Updates

This removes the bundled Bitnami postgresql and mysql sub-charts and replaces them with the CNPG and PXC operator cluster and database charts respectively. Both require you to have pre-installed their respective operators.

You can enable or disable the built-in CNPG Cluster subchart by toggling cnpg.enabled.

For more info on CNPG (Cloud Native Postgreql Operator):

operator chart: https://github.com/cloudnative-pg/charts/tree/main/charts/cloudnative-pg
cluster chart: https://github.com/cloudnative-pg/charts/tree/main/charts/cluster
docs: https://cloudnative-pg.io/docs/1.30/

You can enable or disable the built-in mysql PXC DB subchart by toggling mysql.enabled.

For more info on PXC (Percona MySQL Operator):

operator chart: https://github.com/percona/percona-helm-charts/tree/main/charts/pxc-operator
db chart: https://github.com/percona/percona-helm-charts/tree/main/charts/pxc-db
docs: https://docs.percona.com/percona-xtradb-cluster/8.4/

Issue Fixes:

Fixes #13
Fixes #12

We have also gotten rid of the externalDatabase.image parameters and replaced them with dbReadiness.image.

## Minor coturn update <details> <summary>Updates appVersion to <code>v4.18.0</code>.</summary> - [Release Notes](https://github.com/coturn/coturn/releases/tag/4.18.0) - [Compare Source](https://github.com/coturn/coturn/compare/4.17.2...4.18.0) #### Upgrade notes - Three turnserver flags removed: - \--drop-invalid-packets ([#2078](https://github.com/coturn/coturn/issues/2078)) - \--no-dtls ([#2079](https://github.com/coturn/coturn/issues/2079)). - \--no-cli ([#2079](https://github.com/coturn/coturn/issues/2079)). - Log format: session id moved from session <id>: prefix to (session <id>) suffix across 36 sites ([#2072](https://github.com/coturn/coturn/issues/2072)) — breaks anything anchored on the old prefix. - Wire behavior: - ChannelBind-without-allocation now 437 not 400 - duplicate XOR-PEER-ADDRESS/DATA go first-wins - attributes after MESSAGE-INTEGRITY ignored - over-long USERNAME/REALM/NONCE rejected with 400 instead of truncated - \--external-ip applied per address family. #### What's Changed - fix: shrink oversized stack frames in the test utilities by [@eakraly](https://github.com/eakraly) in [#2051](https://github.com/coturn/coturn/pull/2051) - clamp software copy length in handle\_old\_stun\_command by [@alhudz](https://github.com/alhudz) in [#2050](https://github.com/coturn/coturn/pull/2050) - uclient: start the worker pools after session creation, not before by [@eakraly](https://github.com/eakraly) in [#2052](https://github.com/coturn/coturn/pull/2052) - uclient: stamp per-send metadata into the packet, not a shared buffer by [@eakraly](https://github.com/eakraly) in [#2053](https://github.com/coturn/coturn/pull/2053) - Ignore a duplicate DATA attribute in Send instead of discarding by [@eakraly](https://github.com/eakraly) in [#2046](https://github.com/coturn/coturn/pull/2046) - Bind the first XOR-PEER-ADDRESS in ChannelBind, not the last by [@eakraly](https://github.com/eakraly) in [#2048](https://github.com/coturn/coturn/pull/2048) - Size USERNAME, REALM and NONCE limits in bytes per RFC 8489 by [@eakraly](https://github.com/eakraly) in [#2047](https://github.com/coturn/coturn/pull/2047) - Document RFC 8489 and RFC 8656 instead of only the specs they obsolete by [@eakraly](https://github.com/eakraly) in [#2049](https://github.com/coturn/coturn/pull/2049) - don't release port 65535 when turnports\_allocate fails by [@alhudz](https://github.com/alhudz) in [#2056](https://github.com/coturn/coturn/pull/2056) - Build docker images with optimizations on by [@eakraly](https://github.com/eakraly) in [#2057](https://github.com/coturn/coturn/pull/2057) - Advertise IPv6 allocations under their real relayed transport address by [@eakraly](https://github.com/eakraly) in [#2058](https://github.com/coturn/coturn/pull/2058) - turnutils\_peer: reflect DSCP/TOS on echoed datagrams by [@eakraly](https://github.com/eakraly) in [#2059](https://github.com/coturn/coturn/pull/2059) - ci: guard against test-script hangs (timeout wrappers + job timeouts) by [@eakraly](https://github.com/eakraly) in [#2061](https://github.com/coturn/coturn/pull/2061) - Log only the request line for web-admin HTTP requests by [@eakraly](https://github.com/eakraly) in [#2064](https://github.com/coturn/coturn/pull/2064) - skip null memcpy on zero-length stun auth attribute by [@alhudz](https://github.com/alhudz) in [#2066](https://github.com/coturn/coturn/pull/2066) - fix: external ip must valid if the provider responses EDNS by [@tangxinfa](https://github.com/tangxinfa) in [#2060](https://github.com/coturn/coturn/pull/2060) - fix: shrink oversized stack frames flagged by MSVC C6262 by [@eakraly](https://github.com/eakraly) in [#2068](https://github.com/coturn/coturn/pull/2068) - Log only the request line for web-admin HTTP requests by [@eakraly](https://github.com/eakraly) in [#2069](https://github.com/coturn/coturn/pull/2069) - Make the multiplex-peer example tests request EVEN-PORT never [@eakraly](https://github.com/eakraly) in [#2070](https://github.com/coturn/coturn/pull/2070) - Split unauthorized reason by [@eakraly](https://github.com/eakraly) in [#2065](https://github.com/coturn/coturn/pull/2065) - Move session id out of log message prefixes by [@eakraly](https://github.com/eakraly) in [#2072](https://github.com/coturn/coturn/pull/2072) - Silently ignore attributes after message-integrity by [@fippo](https://github.com/fippo) in [#2075](https://github.com/coturn/coturn/pull/2075) - Return allocation mismatch for ChannelBind without allocation by [@pannal](https://github.com/pannal) in [#2067](https://github.com/coturn/coturn/pull/2067) - reject 0x1f control character in SASLprep by [@alhudz](https://github.com/alhudz) in [#2074](https://github.com/coturn/coturn/pull/2074) - hiredis: clean up failed async connection setup by [@junkilee80](https://github.com/junkilee80) in [#2073](https://github.com/coturn/coturn/pull/2073) - Replace ubuntu 24.04 with 26.04LTS by [@eakraly](https://github.com/eakraly) in [#2076](https://github.com/coturn/coturn/pull/2076) - Deprecate option drop-invalid-packets by [@eakraly](https://github.com/eakraly) in [#2078](https://github.com/coturn/coturn/pull/2078) - Update help with missing arguments by [@eakraly](https://github.com/eakraly) in [#2079](https://github.com/coturn/coturn/pull/2079) </details> ## Major Database Updates This removes the bundled Bitnami postgresql and mysql sub-charts and replaces them with the CNPG and PXC operator cluster and database charts respectively. Both require you to have pre-installed their respective operators. You can enable or disable the built-in CNPG Cluster subchart by toggling `cnpg.enabled`. For more info on CNPG (Cloud Native Postgreql Operator): - operator chart: https://github.com/cloudnative-pg/charts/tree/main/charts/cloudnative-pg - cluster chart: https://github.com/cloudnative-pg/charts/tree/main/charts/cluster - docs: https://cloudnative-pg.io/docs/1.30/ You can enable or disable the built-in mysql PXC DB subchart by toggling `mysql.enabled`. For more info on PXC (Percona MySQL Operator): - operator chart: https://github.com/percona/percona-helm-charts/tree/main/charts/pxc-operator - db chart: https://github.com/percona/percona-helm-charts/tree/main/charts/pxc-db - docs: https://docs.percona.com/percona-xtradb-cluster/8.4/ Issue Fixes: - Fixes #13 - Fixes #12 We have also gotten rid of the `externalDatabase.image` parameters and replaced them with `dbReadiness.image`.

jessebot added the

major

label

2026-09-08 11:47:08 +00:00

jessebot self-assigned this

2026-09-08 11:47:08 +00:00

jessebot added 2 commits

2026-09-08 11:47:08 +00:00

working to get rid of bitnami mysql in favor of pxc db 790a27cad4

note our new sub-chart for mysql

Helm Lint / lint (pull_request) Successful in 7s

Details