# Panfactum Changelog — edge.24-08-22

> Improves Redis persistence strategy for faster recovery, adds disruption window controller for scheduling maintenance periods, introduces PostgreSQL synchronous replication, and enhances Velero backup reliability.

## Highlights

- Redis AOF persistence removed in favor of RDB-only — faster recovery, `redis_appendfsync` input removed
- `token_lifetime_seconds` renamed to `token_lifetime_hours` in [`vault_auth_oidc`](https://panfactum.com/docs/edge/reference/infrastructure-modules/direct/vault/vault_auth_oidc)
- New [`kube_disruption_window_controller`](https://panfactum.com/docs/edge/reference/infrastructure-modules/submodule/kubernetes/kube_disruption_window_controller) for time-based maintenance windows
- New `pg_sync_replication_enabled` input for PostgreSQL synchronous replication

## Breaking Changes

- [`kube_redis_sentinel`](https://panfactum.com/docs/edge/reference/infrastructure-modules/submodule/kubernetes/kube_redis_sentinel) has been switched to use only RDB for persistence (previously used both AOF and RDB). The `redis_appendfsync` input has
  - Impacts: iac-module `kube_redis_sentinel` — Switched to RDB-only persistence; redis_appendfsync removed
- `token_lifetime_seconds` has been changed to `token_lifetime_hours` in [`vault_auth_oidc`](https://panfactum.com/docs/edge/reference/infrastructure-modules/direct/vault/vault_auth_oidc) to avoid a perpetual diff issue present in the Vault provider.
  - Impacts: iac-module `vault_auth_oidc` — Token lifetime input changed from seconds to hours
- Removed the daily backups from [`kube_velero`](https://panfactum.com/docs/edge/reference/infrastructure-modules/direct/kubernetes/kube_velero) as they were undocumented and had no realistic use case.
  - Impacts: iac-module `kube_velero` — Undocumented daily backups removed

## Additions

- Adds a new submodule, [`kube_disruption_window_controller`](https://panfactum.com/docs/edge/reference/infrastructure-modules/submodule/kubernetes/kube_disruption_window_controller), for specifying time-based disruption windows for disruption-sensitive workloads such as databases. Disruption window capabilities have
  - Impacts: iac-module `kube_disruption_window_controller` — New submodule for time-based disruption windows
  - Impacts: iac-module `kube_pg_cluster` — Disruption window capabilities added
  - Impacts: iac-module `kube_redis_sentinel` — Disruption window capabilities added
- Adds synchronous replication support to [`kube_pg_cluster`](https://panfactum.com/docs/edge/reference/infrastructure-modules/submodule/kubernetes/kube_pg_cluster) via `pg_sync_replication_enabled`.
  - Impacts: iac-module `kube_pg_cluster` — Synchronous replication support added

## Fixes

- Addressed issue where `pg_smart_shutdown_timeout` cannot be set to `0` in [`kube_pg_cluster`](https://panfactum.com/docs/edge/reference/infrastructure-modules/submodule/kubernetes/kube_pg_cluster) without CNPG resetting it to 180.
  - Impacts: iac-module `kube_pg_cluster` — Fixed pg_smart_shutdown_timeout zero-value handling
- Fixed an issue in [`kube_velero`](https://panfactum.com/docs/edge/reference/infrastructure-modules/direct/kubernetes/kube_velero) where stale EBS snapshots were not being deleted.
  - Impacts: iac-module `kube_velero` — Stale EBS snapshot cleanup fixed

## Related Resources

- [JSON Data](https://panfactum.com/docs/changelog/edge.24-08-22.json): Machine-readable data
- [Channel Release List](https://panfactum.com/docs/changelog/edge.json): All releases in this channel