8000 Create replication.md quick walkthrough for pg_tde by Andriciuc · Pull Request #319 · percona/postgres · GitHub
[go: up one dir, main page]

Skip to content

Create replication.md quick walkthrough for pg_tde #319

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 43 commits into from
Jun 25, 2025
Merged
Changes from 1 commit
Commits
Show all changes
43 commits
Select commit Hold shift + click to select a range
72406c5
updated replication.md
Andriciuc May 8, 2025
dd248f4
Update replication.md
Andriciuc May 8, 2025
6d1f228
small fixes to text
Andriciuc May 8, 2025
486a1b0
Merge branch 'TDE_REL_17_STABLE' into DOCS-create-replication.md
Andriciuc May 19, 2025
449a781
Merge branch 'TDE_REL_17_STABLE' into DOCS-create-replication.md
Andriciuc May 20, 2025
e672241
Updated replication.md
Andriciuc May 21, 2025
55e2a57
Merge branch 'DOCS-create-replication.md' of https://github.com/perco…
Andriciuc May 21, 2025
d995bf3
Merge branch 'TDE_REL_17_STABLE' into DOCS-create-replication.md
Andriciuc May 21, 2025
6bf49ad
Merge branch 'TDE_REL_17_STABLE' into DOCS-create-replication.md
Andriciuc May 22, 2025
9e04c3d
updated replication.md with proper information
Andriciuc May 23, 2025
288fbe4
Merge branch 'TDE_REL_17_STABLE' into DOCS-create-replication.md
Andriciuc May 23, 2025
f27ba4d
Merge branch 'TDE_REL_17_STABLE' into DOCS-create-replication.md
Andriciuc May 23, 2025
7a94559
Merge branch 'TDE_REL_17_STABLE' into DOCS-create-replication.md
Andriciuc May 27, 2025
1451d7a
Merge branch 'TDE_REL_17_STABLE' into DOCS-create-replication.md
Andriciuc Jun 2, 2025
02333be
Merge branch 'TDE_REL_17_STABLE' into DOCS-create-replication.md
Andriciuc Jun 4, 2025
5edfd88
Merge branch 'TDE_REL_17_STABLE' into DOCS-create-replication.md
Andriciuc Jun 4, 2025
c736a0d
Update replication.md
Andriciuc Jun 4, 2025
2652ab2
Merge branch 'TDE_REL_17_STABLE' into DOCS-create-replication.md
Andriciuc Jun 5, 2025
f704afa
Update replication.md
Andriciuc Jun 5, 2025
be718a5
Merge branch 'TDE_REL_17_STABLE' into DOCS-create-replication.md
Andriciuc Jun 5, 2025
6bca4af
Update replication.md
Andriciuc Jun 6, 2025
963c6bc
Merge branch 'TDE_REL_17_STABLE' into DOCS-create-replication.md
Andriciuc Jun 6, 2025
6e24fb9
Merge branch 'TDE_REL_17_STABLE' into DOCS-create-replication.md
Andriciuc Jun 6, 2025
d6863a4
Merge branch 'TDE_REL_17_STABLE' into DOCS-create-replication.md
Andriciuc Jun 9, 2025
0572b97
Merge branch 'TDE_REL_17_STABLE' into DOCS-create-replication.md
Andriciuc Jun 9, 2025
81f82f7
Merge branch 'TDE_REL_17_STABLE' into DOCS-create-replication.md
Andriciuc Jun 9, 2025
15bd921
Merge branch 'TDE_REL_17_STABLE' into DOCS-create-replication.md
Andriciuc Jun 9, 2025
aea50a2
Update replication.md
Andriciuc Jun 9, 2025
f37eecf
Merge branch 'TDE_REL_17_STABLE' into DOCS-create-replication.md
Andriciuc Jun 11, 2025
ef2540d
Merge branch 'TDE_REL_17_STABLE' into DOCS-create-replication.md
Andriciuc Jun 11, 2025
3c7e6f3
Update replication.md
Andriciuc Jun 11, 2025
3af26a7
Merge branch 'TDE_REL_17_STABLE' into DOCS-create-replication.md
Andriciuc Jun 12, 2025
9716803
Merge branch 'TDE_REL_17_STABLE' into DOCS-create-replication.md
Andriciuc Jun 12, 2025
24af28d
Merge branch 'TDE_REL_17_STABLE' into DOCS-create-replication.md
Andriciuc Jun 13, 2025
ed3ef1a
Merge branch 'TDE_REL_17_STABLE' into DOCS-create-replication.md
Andriciuc Jun 13, 2025
b8fa9f2
Merge branch 'TDE_REL_17_STABLE' into DOCS-create-replication.md
Andriciuc Jun 16, 2025
d15fff3
Merge branch 'release-17.5.2' into DOCS-create-replication.md
Andriciuc Jun 16, 2025
a9fb88e
Merge branch 'release-17.5.2' into DOCS-create-replication.md
Andriciuc Jun 18, 2025
6ef6038
Merge branch 'release-17.5.2' into DOCS-create-replication.md
Andriciuc Jun 19, 2025
b877cef
Merge branch 'release-17.5.2' into DOCS-create-replication.md
Andriciuc Jun 20, 2025
23189d7
updated based on latest feedback
Andriciuc Jun 25, 2025
817d133
Merge branch 'release-17.5.2' into DOCS-create-replication.md
Andriciuc Jun 25, 2025
e1bd244
Merge branch 'release-17.5.2' into DOCS-create-replication.md
Andriciuc Jun 25, 2025
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
8000
Diff view
Diff view
Prev Previous commit
Next Next commit
small fixes to text
Updated text a bit, need to further lint it more

PG-802 linked
  • Loading branch information
Andriciuc committed May 8, 2025
commit 6d1f228101b86f89b4bda5e37c37cdbd5136d702
6 changes: 3 additions & 3 deletions contrib/pg_tde/documentation/docs/replication.md
Original file line number Diff line number Diff line change
Expand Up @@ -13,16 +13,16 @@
This section outlines how to set up PostgreSQL streaming replication when Percona's `pg_tde` extension (specifically the `heap_tde` access method) is enabled on the primary server.

!!! note
Physical streaming replication copies data blocks directly from the primary to the standby. If these blocks are encrypted on the primary, they arrive encrypted on the standby. Therefore, the standby **must** have access to the **exact same encryption keys** as the primary to decrypt and read this data.
Physical streaming replication copies data blocks directly from the primary to the standby. If these blocks are encrypted on the primary, they arrive **encrypted** on the standby. Therefore, the standby **must** have access to the **exact same encryption keys** as the primary to decrypt and read this data.

## Key Concepts
## Concepts

* **`pg_tde`:** Percona's extension for Transparent Data Encryption in PostgreSQL.
* **`heap_tde`:** The table access method provided by `pg_tde` that encrypts entire tables using a master key.
* **Master Key:** The central key used by `pg_tde` to encrypt/decrypt data. Identified by a `pg_tde_master_key_name`.
* **Key Provider:** The mechanism `pg_tde` uses to fetch the master key (e.g., local files, HashiCorp Vault). Configured via `pg_tde_key_provider`.

## How to Set Up Key Provider and Master Key for Replication
## Set Up Key Provider and Master Key for Replication

The standby server(s) **must** be configured to use the **same key provider settings** and access the **same master key (by name and content)** as the primary server.

Expand Down
3876
0