(internal) release_patch: build v5.9.17785

base/blobstore/blobstore.Deployment.yaml

@@ -26,7 +26,7 @@ spec:
     spec:
       containers:
       - name: blobstore
-        image: index.docker.io/sourcegraph/blobstore:5.9.347@sha256:aed5ade110f16b36237c040ffc787e73237e109f0b1341aaa608c44eae48004b
+        image: us-central1-docker.pkg.dev/sourcegraph-ci/rfc795-internal/blobstore:5.9.17785@sha256:2eadc30402db576b9a9ffb3ed1abfbd26e455b7444ab0dde0bd2aa1838c7b21b
         terminationMessagePolicy: FallbackToLogsOnError
         ports:
         - containerPort: 9000

base/cadvisor/cadvisor.DaemonSet.yaml

@@ -26,7 +26,7 @@ spec:
       serviceAccountName: cadvisor
       containers:
       - name: cadvisor
-        image: index.docker.io/sourcegraph/cadvisor:5.9.347@sha256:4f2a2c550f4cdfeca0d87cf607d75d356f3be6a32132fa88cdbb3e086ae6429a
+        image: us-central1-docker.pkg.dev/sourcegraph-ci/rfc795-internal/cadvisor:5.9.17785@sha256:5b4459633e28b53a41fdb3118194d9c353373d7e4327e73cb44ad9a788815ae9
         args:
         # Kubernetes-specific flags below (other flags are baked into the Docker image)
         #

base/codeinsights-db/codeinsights-db.Deployment.yaml

@@ -26,7 +26,7 @@ spec:
     spec:
       initContainers:
       - name: correct-data-dir-permissions
-        image: index.docker.io/sourcegraph/alpine-3.14:5.9.347@sha256:b4d78b475c4eb1fa4e592338bf619939d574b0ac7056df4d96533748c5c06560
+        image: us-central1-docker.pkg.dev/sourcegraph-ci/rfc795-internal/alpine-3.14:5.9.17785@sha256:37e5c808adb380a04902e8620dbf44a716509431de4e7151e733609b40344084
         command: ["sh", "-c", "if [ -d /var/lib/postgresql/data/pgdata ]; then chmod 750 /var/lib/postgresql/data/pgdata; fi"]
         volumeMounts:
         - mountPath: /var/lib/postgresql/data/
@@ -42,7 +42,7 @@ spec:
             memory: "50Mi"
       containers:
       - name: codeinsights
-        image: index.docker.io/sourcegraph/codeinsights-db:5.9.347@sha256:dfe1d4f308ae27baddf144ceb7249b653af6c6cdd731a82e3a36741a7a939e94
+        image: us-central1-docker.pkg.dev/sourcegraph-ci/rfc795-internal/codeinsights-db:5.9.17785@sha256:2a49fd773e6d15b1e2796917f511ec702e1d939e16cb5092c23c408859fd0cdd
         env:
         - name: POSTGRES_DB
           value: postgres
@@ -75,7 +75,7 @@ spec:
           value: postgres://postgres:@localhost:5432/?sslmode=disable
         - name: PG_EXPORTER_EXTEND_QUERY_PATH
           value: /config/code_insights_queries.yaml
-        image: index.docker.io/sourcegraph/postgres_exporter:5.9.347@sha256:5ae8e30dc827e30154ca1c0d309b476e0298b354e877fe95f71b4c5130d1da33
+        image: us-central1-docker.pkg.dev/sourcegraph-ci/rfc795-internal/postgres_exporter:5.9.17785@sha256:f6a536624f6852b3c906b72bbe3bbcc29004a442de165698e5831f7834487bba
         terminationMessagePolicy: FallbackToLogsOnError
         name: pgsql-exporter
         resources:

base/codeinsights-db/codeinsights-db.StatefulSet.yaml

@@ -0,0 +1,98 @@
+apiVersion: apps/v1
+kind: StatefulSet
+metadata:
+  annotations:
+    description: Code Insights Postgres DB instance.
+  labels:
+    app.kubernetes.io/component: codeinsights-db
+    deploy: sourcegraph
+    sourcegraph-resource-requires: no-cluster-admin
+  name: codeinsights-db
+spec:
+  replicas: 1
+  revisionHistoryLimit: 10
+  selector:
+    matchLabels:
+      app: codeinsights-db
+  serviceName: codeinsights-db
+  template:
+    metadata:
+      labels:
+        app: codeinsights-db
+        deploy: sourcegraph
+        group: backend
+    spec:
+      containers:
+      - env:
+        - name: POSTGRES_DB
+          value: postgres
+        - name: POSTGRES_PASSWORD
+          value: password
+        - name: POSTGRES_USER
+          value: postgres
+        - name: PGDATA
+          value: /var/lib/postgresql/data/pgdata
+        - name: POSTGRESQL_CONF_DIR
+          value: /conf
+        image: index.docker.io/sourcegraph/postgresql-16-codeinsights:5.10.2832@sha256:96b88fb2fe8bbd735be8ee75e5b49c70d7dc11089ae5fa7307955728adba6a7d
+        name: codeinsights
+        ports:
+        - containerPort: 5432
+          name: codeinsights-db
+        securityContext:
+          allowPrivilegeEscalation: false
+          runAsGroup: 70
+          runAsUser: 70
+        terminationMessagePolicy: FallbackToLogsOnError
+        volumeMounts:
+        - mountPath: /var/lib/postgresql/data/
+          name: disk
+        - mountPath: /conf
+          name: codeinsights-conf
+      - env:
+        - name: DATA_SOURCE_NAME
+          value: postgres://postgres:@localhost:5432/?sslmode=disable
+        - name: PG_EXPORTER_EXTEND_QUERY_PATH
+          value: /config/code_insights_queries.yaml
+        image: us-central1-docker.pkg.dev/sourcegraph-ci/rfc795-internal/postgres_exporter:5.9.17785@sha256:f6a536624f6852b3c906b72bbe3bbcc29004a442de165698e5831f7834487bba
+        name: pgsql-exporter
+        ports:
+        - containerPort: 9187
+          name: pgsql-exporter
+        terminationMessagePolicy: FallbackToLogsOnError
+      initContainers:
+      - command:
+        - sh
+        - -c
+        - if [ -d /var/lib/postgresql/data/pgdata ]; then chmod 750 /var/lib/postgresql/data/pgdata; fi
+        image: us-central1-docker.pkg.dev/sourcegraph-ci/rfc795-internal/alpine-3.14:5.9.17785@sha256:37e5c808adb380a04902e8620dbf44a716509431de4e7151e733609b40344084
+        name: correct-data-dir-permissions
+        resources:
+          limits:
+            cpu: 10m
+            memory: 50Mi
+          requests:
+            cpu: 10m
+            memory: 50Mi
+        securityContext:
+          allowPrivilegeEscalation: false
+          runAsGroup: 70
+          runAsUser: 70
+        volumeMounts:
+        - mountPath: /var/lib/postgresql/data/
+          name: disk
+      securityContext:
+        fsGroup: 70
+        fsGroupChangePolicy: OnRootMismatch
+        runAsUser: 70
+      terminationGracePeriodSeconds: 120
+      volumes:
+      - name: disk
+        persistentVolumeClaim:
+          claimName: codeinsights-db
+      - configMap:
+          defaultMode: 511
+          name: codeinsights-db-conf
+        name: codeinsights-conf
+  updateStrategy:
+    type: RollingUpdate

base/codeintel-db/codeintel-db.Deployment.yaml

@@ -27,7 +27,7 @@ spec:
     spec:
       initContainers:
       - name: correct-data-dir-permissions
-        image: index.docker.io/sourcegraph/alpine-3.14:5.9.347@sha256:b4d78b475c4eb1fa4e592338bf619939d574b0ac7056df4d96533748c5c06560
+        image: us-central1-docker.pkg.dev/sourcegraph-ci/rfc795-internal/alpine-3.14:5.9.17785@sha256:37e5c808adb380a04902e8620dbf44a716509431de4e7151e733609b40344084
         command: ["sh", "-c", "if [ -d /data/pgdata-12 ]; then chmod 750 /data/pgdata-12; fi"]
         volumeMounts:
         - mountPath: /data
@@ -43,7 +43,7 @@ spec:
             memory: "50Mi"
       containers:
       - name: pgsql
-        image: index.docker.io/sourcegraph/codeintel-db:5.9.347@sha256:98399050651d0d0ba169693c82f254ad1c160e28d3a16c42e1b82bbc7f0cb9e5
+        image: us-central1-docker.pkg.dev/sourcegraph-ci/rfc795-internal/codeintel-db:5.9.17785@sha256:516d731ba26bb138332429bcf964d7542b2573df5553bf1fb6f5be91a4c9af99
         terminationMessagePolicy: FallbackToLogsOnError
         readinessProbe:
           exec:
@@ -80,7 +80,7 @@ spec:
           value: postgres://sg:@localhost:5432/?sslmode=disable
         - name: PG_EXPORTER_EXTEND_QUERY_PATH
           value: /config/code_intel_queries.yaml
-        image: index.docker.io/sourcegraph/postgres_exporter:5.9.347@sha256:5ae8e30dc827e30154ca1c0d309b476e0298b354e877fe95f71b4c5130d1da33
+        image: us-central1-docker.pkg.dev/sourcegraph-ci/rfc795-internal/postgres_exporter:5.9.17785@sha256:f6a536624f6852b3c906b72bbe3bbcc29004a442de165698e5831f7834487bba
         terminationMessagePolicy: FallbackToLogsOnError
         name: pgsql-exporter
         resources:

base/codeintel-db/codeintel-db.StatefulSet.yaml

@@ -0,0 +1,103 @@
+apiVersion: apps/v1
+kind: StatefulSet
+metadata:
+  annotations:
+    description: Postgres database for various data.
+    kubectl.kubernetes.io/default-container: pgsql
+  labels:
+    app.kubernetes.io/component: codeintel-db
+    deploy: sourcegraph
+    sourcegraph-resource-requires: no-cluster-admin
+  name: codeintel-db
+spec:
+  replicas: 1
+  revisionHistoryLimit: 10
+  selector:
+    matchLabels:
+      app: codeintel-db
+  serviceName: codeintel-db
+  template:
+    metadata:
+      labels:
+        app: codeintel-db
+        deploy: sourcegraph
+        group: backend
+    spec:
+      containers:
+      - image: index.docker.io/sourcegraph/postgresql-16:5.10.2832@sha256:7a637a98960cb7d3ac6705c7f7335874c005ed9f0c68bfaa0e5eebf2d7f71e94
+        livenessProbe:
+          exec:
+            command:
+            - /liveness.sh
+          initialDelaySeconds: 15
+        name: pgsql
+        ports:
+        - containerPort: 5432
+          name: pgsql
+        readinessProbe:
+          exec:
+            command:
+            - /ready.sh
+        securityContext:
+          allowPrivilegeEscalation: false
+          runAsGroup: 999
+          runAsUser: 999
+        startupProbe:
+          exec:
+            command:
+            - /liveness.sh
+          failureThreshold: 360
+          periodSeconds: 10
+        terminationMessagePolicy: FallbackToLogsOnError
+        volumeMounts:
+        - mountPath: /data
+          name: disk
+        - mountPath: /conf
+          name: pgsql-conf
+      - env:
+        - name: DATA_SOURCE_NAME
+          value: postgres://sg:@localhost:5432/?sslmode=disable
+        - name: PG_EXPORTER_EXTEND_QUERY_PATH
+          value: /config/code_intel_queries.yaml
+        image: us-central1-docker.pkg.dev/sourcegraph-ci/rfc795-internal/postgres_exporter:5.9.17785@sha256:f6a536624f6852b3c906b72bbe3bbcc29004a442de165698e5831f7834487bba
+        name: pgsql-exporter
+        ports:
+        - containerPort: 9187
+          name: pgsql-exporter
+        terminationMessagePolicy: FallbackToLogsOnError
+      initContainers:
+      - command:
+        - sh
+        - -c
+        - if [ -d /data/pgdata-12 ]; then chmod 750 /data/pgdata-12; fi
+        image: us-central1-docker.pkg.dev/sourcegraph-ci/rfc795-internal/alpine-3.14:5.9.17785@sha256:37e5c808adb380a04902e8620dbf44a716509431de4e7151e733609b40344084
+        name: correct-data-dir-permissions
+        resources:
+          limits:
+            cpu: 10m
+            memory: 50Mi
+          requests:
+            cpu: 10m
+            memory: 50Mi
+        securityContext:
+          allowPrivilegeEscalation: false
+          runAsGroup: 999
+          runAsUser: 999
+        volumeMounts:
+        - mountPath: /data
+          name: disk
+      securityContext:
+        fsGroup: 999
+        fsGroupChangePolicy: OnRootMismatch
+        runAsUser: 999
+      terminationGracePeriodSeconds: 120
+      volumes:
+      - name: disk
+        persistentVolumeClaim:
+          claimName: codeintel-db
+      - configMap:
+          defaultMode: 511
+          name: codeintel-db-conf
+        name: pgsql-conf
+  updateStrategy:
+    type: RollingUpdate

base/frontend/sourcegraph-frontend.Deployment.yaml

@@ -29,7 +29,7 @@ spec:
     spec:
       initContainers:
       - name: migrator
-        image: index.docker.io/sourcegraph/migrator:5.9.347@sha256:a2a90a003c12643e40256dc4a3a80cd6a1854b67d487b5f8ef7a3cfb6b5a0c93
+        image: us-central1-docker.pkg.dev/sourcegraph-ci/rfc795-internal/migrator:5.9.17785@sha256:3a50acab73c079cbcc0df69ddb03225dd0183bcd02bf1ce9dc710849f3b78dde
         args: ["up"]
         resources:
           limits:
@@ -63,7 +63,7 @@ spec:
           value: sg
       containers:
       - name: frontend
-        image: index.docker.io/sourcegraph/frontend:5.9.347@sha256:a6536c2379c05c6547910c5569dab5ddbc5b09a54219749bebcedfd550359cff
+        image: us-central1-docker.pkg.dev/sourcegraph-ci/rfc795-internal/frontend:5.9.17785@sha256:2456ad7f20d04a674df8c926a2ab3576627bcc984b6118db18c11bd482f8cb10
         args:
         - serve
         env:

base/gitserver/gitserver.StatefulSet.yaml

@@ -35,7 +35,7 @@ spec:
               fieldPath: status.hostIP
         - name: OTEL_EXPORTER_OTLP_ENDPOINT
           value: http://$(OTEL_AGENT_HOST):4317
-        image: index.docker.io/sourcegraph/gitserver:5.9.347@sha256:ad4a27e69f33a9a38a53db0bd801ce6508bfebbc51b2af1e5a881b748742dab2
+        image: us-central1-docker.pkg.dev/sourcegraph-ci/rfc795-internal/gitserver:5.9.17785@sha256:6ed0d3cb298f250687965b61f0762c6ffc290d293f8bc9a80145895fec52e4d6
         terminationMessagePolicy: FallbackToLogsOnError
         livenessProbe:
           initialDelaySeconds: 5

base/grafana/grafana.StatefulSet.yaml

@@ -26,7 +26,7 @@ spec:
     spec:
       containers:
       - name: grafana
-        image: index.docker.io/sourcegraph/grafana:5.9.347@sha256:91d0076d075a461d9ff977f9d32b2c7b7e453869ee38f36ab147f0f3fe347a3f
+        image: us-central1-docker.pkg.dev/sourcegraph-ci/rfc795-internal/grafana:5.9.17785@sha256:f26e275c6d2181a677a8fd077b4524fe85b478492a1d011af8e7aabb6c3edcb6
         terminationMessagePolicy: FallbackToLogsOnError
         ports:
         - containerPort: 3370

base/indexed-search/indexed-search.StatefulSet.yaml

@@ -33,7 +33,7 @@ spec:
           value: http://$(OTEL_AGENT_HOST):4317
         - name: OPENTELEMETRY_DISABLED
           value: "false"
-        image: index.docker.io/sourcegraph/indexed-searcher:5.9.347@sha256:817141cc166702896fdf14f710b5d610042c0639e1dd2ea5a6ef572648fd8456
+        image: us-central1-docker.pkg.dev/sourcegraph-ci/rfc795-internal/indexed-searcher:5.9.17785@sha256:617eca4a1b5e4fefaa6a87c5423667b68a0c27b3c606dbefdd8d74823a913cde
         terminationMessagePolicy: FallbackToLogsOnError
         ports:
         - containerPort: 6070
@@ -67,7 +67,7 @@ spec:
           value: http://$(OTEL_AGENT_HOST):4317
         - name: OPENTELEMETRY_DISABLED
           value: "false"
-        image: index.docker.io/sourcegraph/search-indexer:5.9.347@sha256:2542aaa8fb7b418b94374c14797b90ad3b39688b324897b0adfc726d05a2ba48
+        image: us-central1-docker.pkg.dev/sourcegraph-ci/rfc795-internal/search-indexer:5.9.17785@sha256:97977b63da0b0c1f33926d0a32201e532ffbeada2be2d561c80503c695a28ab5
         terminationMessagePolicy: FallbackToLogsOnError
         ports:
         - containerPort: 6072

base/node-exporter/node-exporter.DaemonSet.yaml

@@ -24,7 +24,7 @@ spec:
     spec:
       containers:
       - name: node-exporter
-        image: index.docker.io/sourcegraph/node-exporter:5.9.347@sha256:43d70602b9f5a461fc6f137d743006605d18dab627b9961587fca499db721d7b
+        image: us-central1-docker.pkg.dev/sourcegraph-ci/rfc795-internal/node-exporter:5.9.17785@sha256:8fc64a1c746b3720a022c78f83481550f2fb6c94bcbbfe1fc339f1314e22d233
         imagePullPolicy: IfNotPresent
         resources:
           limits:

base/otel-collector/otel-agent.DaemonSet.yaml

@@ -26,7 +26,7 @@ spec:
     spec:
       containers:
         - name: otel-agent
-          image: index.docker.io/sourcegraph/opentelemetry-collector:5.9.347@sha256:78846526afae30eaebd0c598720f05490e64cc32534421357d2b40444bf56bfa
+          image: us-central1-docker.pkg.dev/sourcegraph-ci/rfc795-internal/opentelemetry-collector:5.9.17785@sha256:dd5aee9c51b53a51828c7723952d82ca752b79aabb1bd32861a61f66c597c32a
           command:
             - "/bin/otelcol-sourcegraph"
             - "--config=/etc/otel-agent/config.yaml"

base/otel-collector/otel-collector.Deployment.yaml

@@ -26,7 +26,7 @@ spec:
     spec:
       containers:
         - name: otel-collector
-          image: index.docker.io/sourcegraph/opentelemetry-collector:5.9.347@sha256:78846526afae30eaebd0c598720f05490e64cc32534421357d2b40444bf56bfa
+          image: us-central1-docker.pkg.dev/sourcegraph-ci/rfc795-internal/opentelemetry-collector:5.9.17785@sha256:dd5aee9c51b53a51828c7723952d82ca752b79aabb1bd32861a61f66c597c32a
           command:
             - "/bin/otelcol-sourcegraph"
             # To use a custom configuration, edit otel-collector.ConfigMap.yaml

base/pgsql/pgsql.Deployment.yaml

@@ -27,7 +27,7 @@ spec:
     spec:
       initContainers:
       - name: correct-data-dir-permissions
-        image: index.docker.io/sourcegraph/alpine-3.14:5.9.347@sha256:b4d78b475c4eb1fa4e592338bf619939d574b0ac7056df4d96533748c5c06560
+        image: us-central1-docker.pkg.dev/sourcegraph-ci/rfc795-internal/alpine-3.14:5.9.17785@sha256:37e5c808adb380a04902e8620dbf44a716509431de4e7151e733609b40344084
         command: ["sh", "-c", "if [ -d /data/pgdata-12 ]; then chmod 750 /data/pgdata-12; fi"]
         volumeMounts:
         - mountPath: /data
@@ -43,7 +43,7 @@ spec:
             memory: "50Mi"
       containers:
       - env:
-        image: index.docker.io/sourcegraph/postgres-12-alpine:5.9.347@sha256:98399050651d0d0ba169693c82f254ad1c160e28d3a16c42e1b82bbc7f0cb9e5
+        image: us-central1-docker.pkg.dev/sourcegraph-ci/rfc795-internal/postgres-12-alpine:5.9.17785@sha256:516d731ba26bb138332429bcf964d7542b2573df5553bf1fb6f5be91a4c9af99
         terminationMessagePolicy: FallbackToLogsOnError
         readinessProbe:
           exec:
@@ -83,7 +83,7 @@ spec:
           value: postgres://sg:@localhost:5432/?sslmode=disable
         - name: PG_EXPORTER_EXTEND_QUERY_PATH
           value: /config/queries.yaml
-        image: index.docker.io/sourcegraph/postgres_exporter:5.9.347@sha256:5ae8e30dc827e30154ca1c0d309b476e0298b354e877fe95f71b4c5130d1da33
+        image: us-central1-docker.pkg.dev/sourcegraph-ci/rfc795-internal/postgres_exporter:5.9.17785@sha256:f6a536624f6852b3c906b72bbe3bbcc29004a442de165698e5831f7834487bba
         terminationMessagePolicy: FallbackToLogsOnError
         name: pgsql-exporter
         resources: