v1.0.0

postgresql // watchdog

Connection
watchdog

Monitor active and idle connections, detect stale sessions, and alert via Slack or Loki — self-hosted Go CLI.

$ curl -fsSL https://get.pgwd.hermesrodriguez.com/install.sh | sh
$ pgwd --print-sample-config > ./pgwd.conf  # adjust
$ pgwd -config ./pgwd.conf -dry-run -interval 0
curl -fsSL https://get.pgwd.hermesrodriguez.com/install.sh | sh
Install pgwdReleases

Connection monitoring

Thresholds for active/idle counts and stale sessions — configured in YAML or environment, not ad-hoc SQL scripts.

Alerting

Slack webhooks and Loki push when limits are exceeded — optional quiet modes for cron.

Operator-grade

Signed releases, packages for Linux/BSD, Helm and Compose paths in pgwd-selfhosted — built for DBAs and SREs.

pgwd at a glance

pgwd v1.0.0 product infographic

Quick start

Operator examples:pgwd-selfhosted/run/examples

Recent releases

v1.0.02026-07-18

Stable
  • Stable API: removed legacy db:, total/active thresholds, and notify_on_connect_failure
  • Exit codes 2 and 3 documented; Cosign v3 checksum signing bundle
  • Operator docs: UPGRADE-0.9-to-1.0, compare.md, postgresql-connection-limits.md

v0.9.02026-07-13

Security
  • Removed DISCOVER_MY_PASSWORD / pods/exec — use Secret-backed DSN or kube.password_from_secret
  • Optional /metrics auth (Bearer or basic); Prometheus label escaping; CSV formula-injection sanitization
  • Config profiles, optional --strict, opt-in collector; docs/use-cases.md and kube passwords guide

v0.8.02026-07-11

Supply chain
  • Distroless container runtime (static-debian13:nonroot); Cosign + Syft SBOM on releases
  • make cover-check (≥80% library coverage) in make release-check and CI

Full changelog on GitHub

Repositories

RepoRole
hrodrig/pgwdCLI, releases, container image, README
hrodrig/pgwd-selfhostedDocker Compose, Helm, cron, examples