Update template files from latest zalando image

Dockerfile

@@ -6,7 +6,8 @@ WORKDIR /
 
 RUN addgroup -S pgbouncer  \
 	&& adduser -S pgbouncer  \
-	&& mkdir -p /etc/pgbouncer /var/log/pgbouncer /var/run/pgbouncer
+	&& mkdir -p /etc/pgbouncer /var/log/pgbouncer /var/run/pgbouncer \
+	&& update-ca-certificates
 
 COPY pgbouncer.ini.tmpl /etc/pgbouncer/
 COPY auth_file.txt.tmpl /etc/pgbouncer/
@@ -14,6 +15,6 @@ COPY entrypoint.sh /
 
 RUN chown -R pgbouncer:pgbouncer /var/log/pgbouncer /var/run/pgbouncer /etc/pgbouncer /etc/ssl/certs \
     && chmod +x /entrypoint.sh
-    
+
 USER pgbouncer:pgbouncer
 ENTRYPOINT ["/bin/sh", "/entrypoint.sh"]

auth_file.txt.tmpl

@@ -1,2 +1 @@
 "$PGUSER" "$PGPASSWORD"
-"$STATS_USER" "$STATS_PASSWORD"

nydus-prefetch.txt

@@ -0,0 +1,22 @@
+/bin/busybox
+/lib/ld-musl-aarch64.so.1
+/entrypoint.sh
+/usr/bin/openssl
+/lib/libssl.so.3
+/lib/libcrypto.so.3
+/etc/ssl/openssl.cnf
+/etc/ssl/certs/pgbouncer.key
+/etc/ssl/certs/pgbouncer.crt
+/etc/pgbouncer/pgbouncer.ini.tmpl
+/etc/pgbouncer/pgbouncer.ini
+/usr/bin/envsubst
+/usr/lib/libintl.so.8.4.0
+/etc/pgbouncer/auth_file.txt.tmpl
+/etc/pgbouncer/auth_file.txt
+/usr/bin/pgbouncer
+/usr/lib/libcares.so.2.6.1
+/usr/lib/libevent-2.1.so.7.0.1
+/etc/ssl/certs/ca-certificates.crt
+/var/log/pgbouncer/pgbouncer.log
+/etc/nsswitch.conf
+/run/pgbouncer/pgbouncer.pid

pgbouncer.ini.tmpl

@@ -7,10 +7,10 @@
 pool_mode = $CONNECTION_POOLER_MODE
 listen_port = $CONNECTION_POOLER_PORT
 listen_addr = *
-auth_type = plain
+auth_type = md5
 auth_file = /etc/pgbouncer/auth_file.txt
 admin_users = $PGUSER
-stats_users = $STATS_USER
+stats_users_prefix = robot_
 auth_query = SELECT * FROM $PGSCHEMA.user_lookup($1)
 logfile = /var/log/pgbouncer/pgbouncer.log
 pidfile = /var/run/pgbouncer/pgbouncer.pid
@@ -30,7 +30,14 @@ default_pool_size = $CONNECTION_POOLER_DEFAULT_SIZE
 
 # Add more server connections to pool if below this number. Improves behavior
 # when usual load comes suddenly back after period of total inactivity.
-min_pool_size = $CONNECTION_POOLER_MIN_SIZE
+#
+# NOTE: This value is per pool, i.e. a pair of (db, user), not a global one.
+# Which means on the higher level it has to be calculated from the max allowed
+# database connections and number of databases and users. If not taken into
+# account, then for too many users or databases PgBouncer will go crazy
+# opening/evicting connections. For now disable it.
+#
+# min_pool_size = $CONNECTION_POOLER_MIN_SIZE
 
 # How many additional connections to allow to a pool
 reserve_pool_size = $CONNECTION_POOLER_RESERVE_SIZE