chore(deps): update ghcr.io/cloudnative-pg/postgresql docker tag to v17

[renovate]

This PR contains the following updates:

Package	Update	Change
ghcr.io/cloudnative-pg/postgresql	major	16.8-2 -> 17.4-2

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[magnusbot]

--- kubernetes/main/flux Kustomization: flux-system/flux-system Deployment: flux-system/kustomize-controller

+++ kubernetes/main/flux Kustomization: flux-system/flux-system Deployment: flux-system/kustomize-controller

@@ -43,13 +43,13 @@

               resource: limits.cpu
         - name: GOMEMLIMIT
           valueFrom:
             resourceFieldRef:
               containerName: manager
               resource: limits.memory
-        image: ghcr.io/fluxcd/kustomize-controller:v1.5.1
+        image: ghcr.io/fluxcd/kustomize-controller:v1.5.0
         imagePullPolicy: IfNotPresent
         livenessProbe:
           httpGet:
             path: /healthz
             port: healthz
         name: manager
--- kubernetes/main/apps/database/cloudnative-pg/cluster Kustomization: flux-system/cloudnative-pg-cluster Cluster: database/postgres

+++ kubernetes/main/apps/database/cloudnative-pg/cluster Kustomization: flux-system/cloudnative-pg-cluster Cluster: database/postgres

@@ -7,13 +7,13 @@

     kustomize.toolkit.fluxcd.io/name: cloudnative-pg-cluster
     kustomize.toolkit.fluxcd.io/namespace: flux-system
   name: postgres
   namespace: database
 spec:
   enableSuperuserAccess: true
-  imageName: ghcr.io/cloudnative-pg/postgresql:16.8-2
+  imageName: ghcr.io/cloudnative-pg/postgresql:17.4-2
   instances: 3
   monitoring:
     enablePodMonitor: true
     podMonitorMetricRelabelings:
     - action: replace
       sourceLabels:

[magnusbot]

--- HelmRelease: default/redlib Deployment: default/redlib

+++ HelmRelease: default/redlib Deployment: default/redlib

@@ -34,12 +34,13 @@

         runAsGroup: 65534
         runAsNonRoot: true
         runAsUser: 65534
       hostIPC: false
       hostNetwork: false
       hostPID: false
+      hostUsers: true
       dnsPolicy: ClusterFirst
       containers:
       - env:
         - name: REDLIB_DEFAULT_HIDE_HLS_NOTIFICATION
           value: 'on'
         - name: REDLIB_DEFAULT_SHOW_NSFW
--- HelmRelease: default/satisfactory StatefulSet: default/satisfactory

+++ HelmRelease: default/satisfactory StatefulSet: default/satisfactory

@@ -36,12 +36,13 @@

         runAsGroup: 1000
         runAsNonRoot: true
         runAsUser: 1000
       hostIPC: false
       hostNetwork: false
       hostPID: false
+      hostUsers: true
       dnsPolicy: ClusterFirst
       containers:
       - env:
         - name: MAXTICKRATE
           value: '120'
         - name: ROOTLESS
--- HelmRelease: network/maddy Deployment: network/maddy

+++ HelmRelease: network/maddy Deployment: network/maddy

@@ -36,12 +36,13 @@

         runAsUser: 65534
         seccompProfile:
           type: RuntimeDefault
       hostIPC: false
       hostNetwork: false
       hostPID: false
+      hostUsers: true
       dnsPolicy: ClusterFirst
       topologySpreadConstraints:
       - labelSelector:
           matchLabels:
             app.kubernetes.io/name: maddy
         maxSkew: 1
--- HelmRelease: database/dragonfly-operator Deployment: database/dragonfly-operator

+++ HelmRelease: database/dragonfly-operator Deployment: database/dragonfly-operator

@@ -36,12 +36,13 @@

         runAsGroup: 65534
         runAsNonRoot: true
         runAsUser: 65534
       hostIPC: false
       hostNetwork: false
       hostPID: false
+      hostUsers: true
       dnsPolicy: ClusterFirst
       topologySpreadConstraints:
       - labelSelector:
           matchLabels:
             app.kubernetes.io/name: dragonfly-operator
         maxSkew: 1
--- HelmRelease: network/external-dns-pihole Deployment: network/external-dns-pihole-pihole-1

+++ HelmRelease: network/external-dns-pihole Deployment: network/external-dns-pihole-pihole-1

@@ -36,12 +36,13 @@

         runAsGroup: 568
         runAsNonRoot: true
         runAsUser: 568
       hostIPC: false
       hostNetwork: false
       hostPID: false
+      hostUsers: true
       dnsPolicy: ClusterFirst
       containers:
       - args:
         - --source=ingress
         - --source=service
         - --registry=noop
--- HelmRelease: network/external-dns-pihole Deployment: network/external-dns-pihole-pihole-2

+++ HelmRelease: network/external-dns-pihole Deployment: network/external-dns-pihole-pihole-2

@@ -36,12 +36,13 @@

         runAsGroup: 568
         runAsNonRoot: true
         runAsUser: 568
       hostIPC: false
       hostNetwork: false
       hostPID: false
+      hostUsers: true
       dnsPolicy: ClusterFirst
       containers:
       - args:
         - --source=ingress
         - --source=service
         - --registry=noop
--- HelmRelease: default/ferdium Deployment: default/ferdium

+++ HelmRelease: default/ferdium Deployment: default/ferdium

@@ -30,12 +30,13 @@

       enableServiceLinks: false
       serviceAccountName: default
       automountServiceAccountToken: true
       hostIPC: false
       hostNetwork: false
       hostPID: false
+      hostUsers: true
       dnsPolicy: ClusterFirst
       initContainers:
       - envFrom:
         - secretRef:
             name: ferdium-secret
         image: ghcr.io/onedr0p/postgres-init:16
--- HelmRelease: external-secrets/bitwarden Deployment: external-secrets/bitwarden

+++ HelmRelease: external-secrets/bitwarden Deployment: external-secrets/bitwarden

@@ -32,12 +32,13 @@

         runAsGroup: 769
         runAsNonRoot: true
         runAsUser: 769
       hostIPC: false
       hostNetwork: false
       hostPID: false
+      hostUsers: true
       dnsPolicy: ClusterFirst
       containers:
       - envFrom:
         - secretRef:
             name: bitwarden-secret
         image: ghcr.io/roxedus/bw:2024.12.0@sha256:d190dcdae6fbfbadf5d5109af86504413828825cbe47b34894380afe2901720a
--- HelmRelease: default/searxng Deployment: default/searxng

+++ HelmRelease: default/searxng Deployment: default/searxng

@@ -30,12 +30,13 @@

       enableServiceLinks: false
       serviceAccountName: default
       automountServiceAccountToken: true
       hostIPC: false
       hostNetwork: false
       hostPID: false
+      hostUsers: true
       dnsPolicy: ClusterFirst
       topologySpreadConstraints:
       - labelSelector:
           matchLabels:
             app.kubernetes.io/name: searxng
         maxSkew: 1
--- HelmRelease: network/cloudflared Deployment: network/cloudflared

+++ HelmRelease: network/cloudflared Deployment: network/cloudflared

@@ -36,12 +36,13 @@

         runAsUser: 65534
         seccompProfile:
           type: RuntimeDefault
       hostIPC: false
       hostNetwork: false
       hostPID: false
+      hostUsers: true
       dnsPolicy: ClusterFirst
       topologySpreadConstraints:
       - labelSelector:
           matchLabels:
             app.kubernetes.io/name: cloudflared
         maxSkew: 1