Number of minor ops cleanups

.github/renovate.json

@@ -40,6 +40,19 @@
       "matchStrings": ["GOTESTSUM_VERSION \\?= (?<currentValue>v[\\d.]+)"],
       "depNameTemplate": "gotest.tools/gotestsum",
       "datasourceTemplate": "go"
+    },
+    {
+      "fileMatch": ["^postgres/Dockerfile$"],
+      "matchStrings": ["FROM (?<depName>[^:\\n]+):(?<currentValue>[^@\\n]+)@sha256:(?<currentDigest>[a-f0-9]+)"],
+      "datasourceTemplate": "docker"
+    },
+    {
+      "fileMatch": ["^postgres/Dockerfile$"],
+      "matchStrings": ["ENV PG_VERSION (?<currentValue>[\\d]+\\.[\\d]+)-[^\\n]+"],
+      "depNameTemplate": "postgres",
+      "datasourceTemplate": "docker",
+      "versioningTemplate": "semver-coerced",
+      "autoReplaceStringTemplate": "ENV PG_VERSION {{{newValue}}}-1.pgdg13+1"
     }
   ],
   "packageRules": [
@@ -49,6 +62,17 @@
       ],
       "allowedVersions": "1.26.x"
     },
+    {
+      "matchPackageNames": [
+        "postgres"
+      ],
+      "matchFileNames": [
+        "postgres/Dockerfile"
+      ],
+      "allowedVersions": "17.x",
+      "automerge": true,
+      "groupName": "postgres Dockerfile"
+    },
     {
       "matchPackageNames": [
         "/^github\\.com\\/sapcc\\/.*/"
@@ -80,4 +104,4 @@
     "before 8am on Friday"
   ],
   "semanticCommits": "disabled"
-}
+}

cmd/manager/main.go

@@ -7,6 +7,7 @@ import (
 	"context"
 	"crypto/tls"
 	"flag"
+	"log/slog"
 	"net/http"
 	"os"
 	"path/filepath"
@@ -143,13 +144,18 @@ func main() {
 	flag.BoolVar(&enableHTTP2, "enable-http2", false,
 		"If set, HTTP/2 will be enabled for the metrics and webhook servers")
 	opts := zap.Options{
-		Development: true,
+		Development: false,
 	}
 	opts.BindFlags(flag.CommandLine)
 	flag.Parse()
 
 	ctrl.SetLogger(zap.New(zap.UseFlagOptions(&opts)))
 
+	// Configure slog (used across internal packages) with structured JSON output.
+	slog.SetDefault(slog.New(slog.NewJSONHandler(os.Stdout, &slog.HandlerOptions{
+		Level: slog.LevelInfo,
+	})))
+
 	// Log the main configuration
 	setupLog.Info("loaded main configuration",
 		"enabledControllers", mainConfig.EnabledControllers,

helm/bundles/cortex-cinder/Chart.yaml

@@ -11,7 +11,7 @@ dependencies:
   # from: file://../../library/cortex-postgres
   - name: cortex-postgres
     repository: oci://ghcr.io/cobaltcore-dev/cortex/charts
-    version: 0.5.13
+    version: 0.5.14
 
   # from: file://../../library/cortex
   - name: cortex

helm/bundles/cortex-manila/Chart.yaml

@@ -11,7 +11,7 @@ dependencies:
   # from: file://../../library/cortex-postgres
   - name: cortex-postgres
     repository: oci://ghcr.io/cobaltcore-dev/cortex/charts
-    version: 0.5.13
+    version: 0.5.14
 
   # from: file://../../library/cortex
   - name: cortex

helm/bundles/cortex-nova/Chart.yaml

@@ -11,7 +11,7 @@ dependencies:
   # from: file://../../library/cortex-postgres
   - name: cortex-postgres
     repository: oci://ghcr.io/cobaltcore-dev/cortex/charts
-    version: 0.5.13
+    version: 0.5.14
 
   # from: file://../../library/cortex
   - name: cortex

helm/bundles/cortex-nova/alerts/nova.alerts.yaml

@@ -731,4 +731,4 @@ groups:
         The webhook {{ $labels.webhook }} has experienced errors in the last 5 minutes.
         This may indicate issues with the webhook logic, connectivity problems, or
         external factors causing failures. Check the webhook server logs for error
-        details and investigate the affected resources.
+        details and investigate the affected resources.

helm/bundles/cortex-nova/templates/knowledges_kvm.yaml

@@ -23,6 +23,7 @@ metadata:
   name: kvm-libvirt-domain-cpu-steal-pct
 spec:
   schedulingDomain: nova
+  recency: "60s"
   extractor:
     name: kvm_libvirt_domain_cpu_steal_pct_extractor
   description: |

helm/library/cortex-postgres/Chart.yaml

@@ -5,5 +5,5 @@ apiVersion: v2
 name: cortex-postgres
 description: Postgres setup for Cortex.
 type: application
-version: 0.5.13
+version: 0.5.14
 appVersion: "sha-6db36b81"

internal/knowledge/extractor/controller.go

@@ -53,9 +53,10 @@ func (r *KnowledgeReconciler) Reconcile(ctx context.Context, req ctrl.Request) (
 	// Sanity checks.
 	lastExtracted := knowledge.Status.LastExtracted.Time
 	recency := knowledge.Spec.Recency.Duration
-	if lastExtracted.Add(recency).After(time.Now()) && knowledge.Status.RawLength != 0 {
-		log.Info("skipping knowledge extraction, not yet time", "name", knowledge.Name)
-		return ctrl.Result{RequeueAfter: time.Until(lastExtracted.Add(recency))}, nil
+	if lastExtracted.Add(recency).After(time.Now()) {
+		waitFor := time.Until(lastExtracted.Add(recency))
+		log.Info("skipping knowledge extraction, not yet time", "name", knowledge.Name, "waitFor", waitFor)
+		return ctrl.Result{RequeueAfter: waitFor}, nil
 	}
 
 	extractor, ok := supportedExtractors[knowledge.Spec.Extractor.Name]

internal/scheduling/lib/filter_weigher_pipeline.go

@@ -62,7 +62,7 @@ func InitNewFilterWeigherPipeline[RequestType FilterWeigherPipelineRequest](
 	unknownFilters := []string{}
 	for _, filterConfig := range confedFilters {
 		slog.Info("scheduler: configuring filter", "name", filterConfig.Name)
-		slog.Info("supported:", "filters", maps.Keys(supportedFilters))
+		slog.Info("supported:", "filters", slices.Sorted(maps.Keys(supportedFilters)))
 		makeFilter, ok := supportedFilters[filterConfig.Name]
 		if !ok {
 			slog.Error("scheduler: unsupported filter", "name", filterConfig.Name)
@@ -73,7 +73,7 @@ func InitNewFilterWeigherPipeline[RequestType FilterWeigherPipelineRequest](
 		filter = validateFilter(filter)
 		filter = monitorFilter(filter, filterConfig.Name, pipelineMonitor)
 		if err := filter.Init(ctx, client, filterConfig); err != nil {
-			slog.Error("scheduler: failed to initialize filter", "name", filterConfig.Name, "error", err)
+			slog.Warn("scheduler: failed to initialize filter", "name", filterConfig.Name, "error", err)
 			filterErrors[filterConfig.Name] = errors.New("failed to initialize filter: " + err.Error())
 			continue
 		}
@@ -90,7 +90,7 @@ func InitNewFilterWeigherPipeline[RequestType FilterWeigherPipelineRequest](
 	unknownWeighers := []string{}
 	for _, weigherConfig := range confedWeighers {
 		slog.Info("scheduler: configuring weigher", "name", weigherConfig.Name)
-		slog.Info("supported:", "weighers", maps.Keys(supportedWeighers))
+		slog.Info("supported:", "weighers", slices.Sorted(maps.Keys(supportedWeighers)))
 		makeWeigher, ok := supportedWeighers[weigherConfig.Name]
 		if !ok {
 			slog.Error("scheduler: unsupported weigher", "name", weigherConfig.Name)
@@ -102,7 +102,7 @@ func InitNewFilterWeigherPipeline[RequestType FilterWeigherPipelineRequest](
 		weigher = validateWeigher(weigher)
 		weigher = monitorWeigher(weigher, weigherConfig.Name, pipelineMonitor)
 		if err := weigher.Init(ctx, client, weigherConfig); err != nil {
-			slog.Error("scheduler: failed to initialize weigher", "name", weigherConfig.Name, "error", err)
+			slog.Warn("scheduler: failed to initialize weigher", "name", weigherConfig.Name, "error", err)
 			weigherErrors[weigherConfig.Name] = errors.New("failed to initialize weigher: " + err.Error())
 			continue
 		}

internal/scheduling/nova/external_scheduler_api.go

@@ -93,12 +93,12 @@ func (httpAPI *httpAPI) canRunScheduler(requestData api.ExternalSchedulerRequest
 func (httpAPI *httpAPI) inferPipelineName(requestData api.ExternalSchedulerRequest) (string, error) {
 	hvType, err := requestData.GetHypervisorType()
 	if err != nil {
-		slog.Info("failed to determine hypervisor type, cannot infer pipeline name", "error", err)
+		slog.Warn("failed to determine hypervisor type, cannot infer pipeline name", "error", err)
 		return "", errors.New("failed to determine hypervisor type from request data")
 	}
 	flavorType, err := requestData.GetFlavorType()
 	if err != nil {
-		slog.Info("failed to determine flavor type, cannot infer pipeline name", "error", err)
+		slog.Warn("failed to determine flavor type, cannot infer pipeline name", "error", err)
 		return "", errors.New("failed to determine flavor type from request data")
 	}
 	switch hvType {

internal/scheduling/nova/hypervisor_overcommit_controller.go

@@ -110,7 +110,7 @@ type HypervisorOvercommitController struct {
 // - https://ahmet.im/blog/controller-pitfalls/#reconcile-method-shape
 func (c *HypervisorOvercommitController) Reconcile(ctx context.Context, req ctrl.Request) (ctrl.Result, error) {
 	log := ctrl.LoggerFrom(ctx)
-	log.Info("Reconciling resource")
+	log.V(1).Info("Reconciling resource")
 
 	obj := new(hv1.Hypervisor)
 	if err := c.Get(ctx, req.NamespacedName, obj); err != nil {
@@ -130,7 +130,7 @@ func (c *HypervisorOvercommitController) Reconcile(ctx context.Context, req ctrl
 	// non-overlapping resources from previous mappings.
 	desiredOvercommit := make(map[hv1.ResourceName]float64)
 	for _, mapping := range c.config.OvercommitMappings {
-		log.Info("Processing overcommit mapping",
+		log.V(1).Info("Processing overcommit mapping",
 			"mapping", mapping,
 			"hypervisorTraits", obj.Status.Traits)
 		var applyMapping bool
@@ -142,21 +142,21 @@ func (c *HypervisorOvercommitController) Reconcile(ctx context.Context, req ctrl
 			applyMapping = !slices.Contains(obj.Status.Traits, *mapping.HasntTrait)
 		default:
 			// This should never happen due to validation, but we check it just in case.
-			log.Info("Skipping overcommit mapping with no trait specified",
+			log.V(1).Info("Skipping overcommit mapping with no trait specified",
 				"overcommit", mapping.Overcommit)
 			continue
 		}
 		if !applyMapping {
 			continue
 		}
-		log.Info("Applying overcommit mapping on hypervisor",
+		log.V(1).Info("Applying overcommit mapping on hypervisor",
 			"overcommit", mapping.Overcommit)
 		maps.Copy(desiredOvercommit, mapping.Overcommit)
 	}
-	log.Info("Desired overcommit ratios based on traits",
+	log.V(1).Info("Desired overcommit ratios based on traits",
 		"desiredOvercommit", desiredOvercommit)
 	if maps.Equal(desiredOvercommit, obj.Spec.Overcommit) {
-		log.Info("Overcommit ratios are up to date, no update needed")
+		log.V(1).Info("Overcommit ratios are up to date, no update needed")
 		return ctrl.Result{}, nil
 	}
 

internal/scheduling/nova/plugins/filters/filter_capabilities.go

@@ -93,11 +93,12 @@ func (s *FilterCapabilitiesStep) Run(traceLog *slog.Logger, request api.External
 
 	hvCaps := make(map[string]map[string]string)
 	for _, hv := range hvs.Items {
-		var err error
-		if hvCaps[hv.Name], err = hvToNovaCapabilities(hv); err != nil {
-			traceLog.Error("failed to get nova capabilities from hypervisor", "host", hv.Name, "error", err)
-			return nil, err
+		caps, err := hvToNovaCapabilities(hv)
+		if err != nil {
+			traceLog.Warn("skipping hypervisor with unknown capabilities", "host", hv.Name, "error", err)
+			continue
 		}
+		hvCaps[hv.Name] = caps
 	}
 	traceLog.Info("looking for capabilities", "capabilities", hvCaps)
 

internal/scheduling/nova/plugins/filters/filter_external_customer.go

@@ -37,7 +37,7 @@ func (s *FilterExternalCustomerStep) Run(traceLog *slog.Logger, request api.Exte
 	result := s.IncludeAllHostsFromRequest(request)
 	domainName, err := request.Spec.Data.GetSchedulerHintStr("domain_name")
 	if err != nil {
-		traceLog.Error("failed to get domain_name scheduler hint, skipping filter", "error", err)
+		traceLog.Warn("failed to get domain_name scheduler hint, skipping filter", "error", err)
 		return result, nil
 	}
 	if slices.Contains(s.Options.CustomerIgnoredDomainNames, domainName) {

internal/scheduling/nova/plugins/filters/filter_has_enough_capacity.go

@@ -263,7 +263,7 @@ func (s *FilterHasEnoughCapacity) Run(traceLog *slog.Logger, request api.Externa
 		}
 		freeCPU, ok := free["cpu"]
 		if !ok || freeCPU.Value() < 0 {
-			traceLog.Error(
+			traceLog.Warn(
 				"host with invalid CPU capacity",
 				"host", host, "freeCPU", freeCPU.String(),
 			)

postgres/Dockerfile

@@ -1,5 +1,4 @@
-# Last updated: 17 Mar 2026
-FROM debian:trixie-slim@sha256:26f98ccd92fd0a44d6928ce8ff8f4921b4d2f535bfa07555ee5d18f61429cf0c
+FROM debian:trixie-slim@sha256:4ffb3a1511099754cddc70eb1b12e50ffdb67619aa0ab6c13fcd800a78ef7c7a
 
 # explicitly set user/group IDs
 RUN set -eux; \
@@ -68,7 +67,7 @@ RUN set -ex; \
 ENV PG_MAJOR 17
 ENV PATH $PATH:/usr/lib/postgresql/$PG_MAJOR/bin
 
-ENV PG_VERSION 17.8-1.pgdg13+1
+ENV PG_VERSION 17.9-1.pgdg13+1
 
 RUN set -ex; \
 	\