Effective Change Date: 2026-07-06
What's changing
The Chainguard AWX image currently ships the postgresql-13, postgresql-13-client, and postgresql-13-dev packages. These provide the client used to connect to your data store, and they stand up a default datastore when your configuration does not specify an external one.
These packages will be upgraded to postgresql-15, postgresql-15-client, and postgresql-15-dev.
After the change date, the AWX image will contain only the PostgreSQL 15 client and the PostgreSQL 15 default datastore. The PostgreSQL 13 versions will no longer be present.
Why we’re making this change
PostgreSQL 13 is end of life and no longer receives upstream fixes, which blocks CVE remediation.
Upstream AWX already moved to PostgreSQL 15 – this change brings the image back in line with upstream and keeps it patchable.
Do you need to do anything?
For most customers, no. Most deployments point AWX at an external, customer-managed PostgreSQL instance. If yours already runs PostgreSQL 15 (or a version compatible with the PostgreSQL 15 client), the upgrade is transparent and you do not need to do anything.
You need to act before 6 July if either applies:
- You rely on the image's built-in default datastore (you have not configured an external database). You can confirm this by looking for postgres_configuration_secret in your configuration, if it’s not defined you are using the built-in datastore.
- You point AWX at an external database that is not compatible with the PostgreSQL 15 client.
If you are affected, you should:
- Provision an external PostgreSQL 15 datastore and migrate your existing AWX data to it, or upgrade your existing external database to a PostgreSQL 15 compatible version (see AWX configuration docs)
- Complete this migration before the change date
What happens if you do nothing: if you depend on the bundled PostgreSQL 13 datastore, AWX is expected to be unable to start against the PostgreSQL 13 data directory after the upgrade, because PostgreSQL 15 cannot read a PostgreSQL 13 data directory without a migration.
Questions or need help with migration planning? We are here to help. Visit our support portal.
- Chainguard Team
Comments
0 comments
Please sign in to leave a comment.