Clarify PostgreSQL upgrade requirements and password configuration

Jackson Bigelowrequested to merge
duo-edit-20251217-060617 into master

Summary

This MR documents a PostgreSQL metrics exporter limitation discovered during a customer upgrade scenario.

Changes

1. Added PostgreSQL metrics exporter limitation section

Documents that the postgres-exporter sidecar container does not honor the postgresql.auth.secretKeys configuration, which can cause metrics container failures even when the main PostgreSQL container works correctly.

Provides three solutions:

  1. Rename secret keys to new convention
  2. Disable metrics if not needed
  3. Configure metrics environment variables (advanced)

2. Added "Renaming secret keys" subsection heading

Reorganized the existing secret renaming script under a clearer heading for better document structure.

Customer scenario context

This improvement came from working with a customer (ticket link - https://gitlab-federal-support.zendesk.com/agent/tickets/14108 - US Gov ZD instance) who:

  • Was upgrading from chart 6.x to 9.x
  • Already on PostgreSQL 16.6.0 (no PostgreSQL version change)
  • Using usePasswordFiles: false (default)
  • Encountered metrics container failures due to secret key naming
Edited by Jackson Bigelow

Merge request reports