feat(updater): 从 felis-postgres 容器读取 PostgreSQL 版本并改为随发布更新镜像

cmd/felis/migrate.go

@@ -18,7 +18,8 @@ import (
 // database that already holds a schema and has migrations pending is bundled
 // first (internal/dbbackup, label pre-migrate). A failed snapshot stops the
 // upgrade; -no-backup is the explicit way past it, e.g. for an external
-// database whose server is newer than the host's pg_dump.
+// database (no [database] deployment, so the host's own pg_dump runs) whose
+// server is newer than that pg_dump.
 func cmdMigrate(args []string, stdout, stderr io.Writer) int {
 	fs := flag.NewFlagSet("migrate", flag.ContinueOnError)
 	fs.SetOutput(stderr)

cmd/felis/update.go

@@ -128,8 +128,9 @@ var updateTargets = []updateTarget{
 		selector:  "postgres",
 		help:      "select PostgreSQL",
 		component: "postgresql",
-		note:      "PostgreSQL comes from the distribution's packages, so a minor release is a package update followed by a restart (a few seconds without the API). A new major needs pg_upgrade first: docs/operations.md §4",
-		command:   "sudo dnf upgrade 'postgresql*' || sudo apt-get install --only-upgrade 'postgresql*'; sudo systemctl restart postgresql",
+		note:      "PostgreSQL runs as the felis-postgres Deployment from the image the Felis release pins by digest; a newer minor reaches the host with a release that moves the pin, and the installer re-run restarts the database on it (a few seconds without the API). A new major is a dump and restore: docs/operations.md §4",
+		command:   installerRerun,
+		installer: true,
 	},
 	{
 		selector:  "mc",
@@ -149,8 +150,9 @@ var updateTargets = []updateTarget{
 // reinstall/repair case.
 //
 // It never applies anything and never mutates the node, so unlike setup/breakGlass
-// it needs no root. The versions it reads come from this host: k3s, cloudflared and
-// PostgreSQL answer `--version`, Velocity's version is read out of the installed jar's
+// it needs no root, apart from PostgreSQL's version, which the felis-postgres container
+// answers through the cluster's admin kubeconfig. The versions it reads come from this
+// host: k3s, cloudflared and PostgreSQL answer `--version`, Velocity's version is read out of the installed jar's
 // manifest, the JRE's out of its release file, and felis-api's is this binary's own
 // build stamp — the same value `felis version` prints, which is what the user asked
 // to be the source of truth.

cmd/felis/update_test.go

@@ -215,8 +215,8 @@ func TestUpdateSelectorsAreFlags(t *testing.T) {
 	}
 }
 
-// k3s and cloudflared move only when the re-run is told to; PostgreSQL is the package
-// manager's, so its guidance carries no installer trailer.
+// k3s and cloudflared move only when the re-run is told to; the release pins the JRE
+// build and the PostgreSQL image, so their guidance is the plain re-run.
 func TestApplyGuidanceForHostDependencies(t *testing.T) {
 	notify := func(c string) updater.Result {
 		return planResult([]updates.Action{{Component: c, Kind: updates.ActionNotify, LatestKnown: true}})
@@ -232,8 +232,8 @@ func TestApplyGuidanceForHostDependencies(t *testing.T) {
 		t.Errorf("--jre guidance is the plain installer re-run:\n%s", jre)
 	}
 	pg := renderApplyGuidance(notify("postgresql"), map[string]bool{"postgres": true}, false)
-	if !strings.Contains(pg, "apt-get install --only-upgrade") || strings.Contains(pg, "Re-running the installer") {
-		t.Errorf("--postgres guidance is the package manager, without the installer trailer:\n%s", pg)
+	if !strings.Contains(pg, "| sudo bash") || strings.Contains(pg, "FELIS_UPGRADE_DEPS") || strings.Contains(pg, "apt-get") || strings.Contains(pg, "systemctl") {
+		t.Errorf("--postgres guidance is the plain installer re-run that moves the image pin:\n%s", pg)
 	}
 }