forked from postgres/postgres
-
Notifications
You must be signed in to change notification settings - Fork 11
Create Release Notes for 1.0 #432
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Merged
+77
−11
Merged
Changes from 1 commit
Commits
Show all changes
29 commits
Select commit
Hold shift + click to select a range
4e348a0
added release notes v1.0
Andriciuc b3d2982
Update variables.yml
Andriciuc ce89527
Update release-notes-v1.0.md
Andriciuc 13a8311
small fixes to variables
Andriciuc 2caf5c7
Merge branch 'TDE_REL_17_STABLE' into pg-tde-release-notes-1.0
Andriciuc cc95301
Update release-notes.md
Andriciuc 2e1335e
Merge branch 'release-17.5.2' into pg-tde-release-notes-1.0
Andriciuc 5088789
Update mkdocs.yml
Andriciuc 676a1e3
Update release-notes-v1.0.md
Andriciuc 82f0868
small fixes
Andriciuc 867043c
Merge branch 'release-17.5.2' into pg-tde-release-notes-1.0
Andriciuc ac292e3
Merge branch 'pg-tde-release-notes-1.0' of https://github.com/percona…
Andriciuc 6e8879f
updated rn and variables
Andriciuc db7eaae
Merge branch 'release-17.5.2' into pg-tde-release-notes-1.0
Andriciuc 8b442d0
Merge branch 'release-17.5.2' into pg-tde-release-notes-1.0
Andriciuc 0686a69
Update release-notes-v1.0.md
Andriciuc 8112716
new tickets and highlights
Andriciuc 15dd4f1
Merge branch 'release-17.5.2' into pg-tde-release-notes-1.0
Andriciuc f0e0253
Merge branch 'release-17.5.2' into pg-tde-release-notes-1.0
Andriciuc 00505e2
Merge branch 'release-17.5.2' into pg-tde-release-notes-1.0
Andriciuc b558f5e
Merge branch 'release-17.5.2' into pg-tde-release-notes-1.0
Andriciuc 2a634e2
Merge branch 'release-17.5.2' into pg-tde-release-notes-1.0
Andriciuc 5228cd6
Update release-notes-v1.0.md
Andriciuc 67c00d5
Update release-notes-v1.0.md
Andriciuc 628a61c
Update release-notes-v1.0.md
Andriciuc 4c71095
Update release-notes-v1.0.md
Andriciuc a93c995
Merge branch 'release-17.5.2' into pg-tde-release-notes-1.0
Andriciuc d46f8c5
Merge branch 'release-17.5.2' into pg-tde-release-notes-1.0
Andriciuc f68b468
Update release-notes-v1.0.md
Andriciuc File filter
Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Update release-notes-v1.0.md
removed highlights, removed tickets that were to do from list, added wal beta mention in highlights
- Loading branch information
commit 67c00d5b58e068a507538767986d676b474968c0
There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
|
@@ -10,35 +10,9 @@ The `pg_tde` by Percona extension brings in [Transparent Data Encryption (TDE)]( | |
|
||
And **stable** for encrypting relational data in PostgreSQL using [Transparent Data Encryption (TDE)](../index/index.md). This milestone brings production-level data protection to PostgreSQL workloads. | ||
|
||
* **Streaming and logical replication compatibility** | ||
* **WAL encryption is still in Beta** | ||
|
||
You can now use `pg_tde` in replication setups. | ||
|
||
* **Improved performance testing & automation** | ||
|
||
Bare-metal fuzz testing, performance benchmarking with CI/CD pipelines, and daily reporting integrations with Grafana and InfluxDB help ensure robustness and transparency. | ||
|
||
* **Key management enhancements** | ||
|
||
Added SQL-level functions and CLI tools for rotating, validating, and managing encryption keys. Now more compliant with PostgreSQL standards. | ||
|
||
* **Better developer experience** | ||
|
||
Contributor guides, PostgreSQL-style CLI, static analysis integration (Clang), and extensive refactoring improve maintainability and onboarding for new contributors. | ||
|
||
* **Security hardened** | ||
|
||
Sensitive metadata redaction, improved error messages, proper SQLSTATE codes, and stricter key validation increase security and clarity. | ||
|
||
* **Major documentation updates** | ||
|
||
The `pg_tde` documentation has received significant updates, which include: | ||
|
||
- New configuration guides for Fortanix, Vault, KMIP and OpenBAO | ||
- Reorganized and expanded topics for Architecture, GUC, Functions, TDE Operations and FAQ | ||
- Extensive and numerous refinements and clarifications across the entire site | ||
|
||
Explore the full documentation [in the official `pg_tde` documentations](https://docs.percona.com/pg-tde/index.html). | ||
The WAL encryption feature is currently still in beta and is not effective unless explicitly enabled. **It is not yet production ready.** Do **not** enable this feature in production environments. | ||
|
||
## Upgrade considerations | ||
|
||
|
@@ -61,20 +35,14 @@ Adjust the limits with caution since it affects other processes running in your | |
|
||
- [PG-802](https://perconadev.atlassian.net/browse/PG-802) – Documented setting up streaming replication with `pg_tde` | ||
- [PG-829](https://perconadev.atlassian.net/browse/PG-829) – Refactored and simplified key map code | ||
- [PG-836](https://perconadev.atlassian.net/browse/PG-836) – Added custom wait events to writing to key files and key provider files | ||
- [PG-1257](https://perconadev.atlassian.net/browse/PG-1257) – Added SQL function to remove the current principal key | ||
- [PG-1292](https://perconadev.atlassian.net/browse/PG-1292) – Added a CI/CD performance test job in PSP GH repo | ||
- [PG-1316](https://perconadev.atlassian.net/browse/PG-1316) – Integrated daily automated Performance Results with InfluxDB and Grafana | ||
- [PG-1351](https://perconadev.atlassian.net/browse/PG-1351) – Documented how to decrypt old backups after the principal key was rotated | ||
- [PG-1443](https://perconadev.atlassian.net/browse/PG-1443) – Made `pg_tde_change_key_provider` CLI utility follow PostgreSQL coding style | ||
- [PG-1448](https://perconadev.atlassian.net/browse/PG-1448) – `pg_tde` now uses jsonc instead of the internal json API | ||
- [PG-1351](https://perconadev.atlassian.net/browse/PG-1351) – Documented how to decrypt old backups after the principal key was rotated | ||
- [PG-1464](https://perconadev.atlassian.net/browse/PG-1464) – Integrated the clang static analyzer for `pg_tde` | ||
|
||
### Improvements | ||
|
||
- [PG-953](https://perconadev.atlassian.net/browse/PG-953) – The tdemap code now allows the creation of duplicate keys | ||
- [PG-1435](https://perconadev.atlassian.net/browse/PG-1435) – Improved error message explanations | ||
- [PG-1499](https://perconadev.atlassian.net/browse/PG-1499) – Enhanced encryption metadata visibility in `pg_tde` | ||
- [PG-1527](https://perconadev.atlassian.net/browse/PG-1527) – Added proper error codes for error messages in `pg_tde` | ||
- [PG-1617](https://perconadev.atlassian.net/browse/PG-1617) – Removed relation key cache | ||
- [PG-1635](https://perconadev.atlassian.net/browse/PG-1635) – User-facing TDE functions now return void | ||
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. We should probably mention @AndersAstrand 's API change here with creating keys being separated from setting them. |
||
|
Oops, something went wrong.
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Uh oh!
There was an error while loading. Please reload this page.