8000 Create Release Notes for 1.0 by Andriciuc · Pull Request #432 · percona/postgres · GitHub
[go: up one dir, main page]

Skip to content

Create Release Notes for 1.0 #432

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 29 commits into from
Jun 30, 2025
Merged
Changes from 1 commit
Commits
Show all changes
29 commits
Select commit Hold shift + click to select a range
4e348a0
added release notes v1.0
Andriciuc Jun 13, 2025
b3d2982
Update variables.yml
Andriciuc Jun 13, 2025
ce89527
Update release-notes-v1.0.md
Andriciuc Jun 16, 2025
13a8311
small fixes to variables
Andriciuc Jun 16, 2025
2caf5c7
Merge branch 'TDE_REL_17_STABLE' into pg-tde-release-notes-1.0
Andriciuc Jun 16, 2025
cc95301
Update release-notes.md
Andriciuc Jun 16, 2025
2e1335e
Merge branch 'release-17.5.2' into pg-tde-release-notes-1.0
Andriciuc Jun 16, 2025
5088789
Update mkdocs.yml
Andriciuc Jun 16, 2025
676a1e3
Update release-notes-v1.0.md
Andriciuc Jun 16, 2025
82f0868
small fixes
Andriciuc Jun 16, 2025
867043c
Merge branch 'release-17.5.2' into pg-tde-release-notes-1.0
Andriciuc Jun 18, 2025
ac292e3
Merge branch 'pg-tde-release-notes-1.0' of https://github.com/percona…
Andriciuc Jun 18, 2025
6e8879f
updated rn and variables
Andriciuc Jun 18, 2025
db7eaae
Merge branch 'release-17.5.2' into pg-tde-release-notes-1.0
Andriciuc Jun 25, 2025
8b442d0
Merge branch 'release-17.5.2' into pg-tde-release-notes-1.0
Andriciuc Jun 26, 2025
0686a69
Update release-notes-v1.0.md
Andriciuc Jun 26, 2025
8112716
new tickets and highlights
Andriciuc Jun 27, 2025
15dd4f1
Merge branch 'release-17.5.2' into pg-tde-release-notes-1.0
Andriciuc Jun 27, 2025
f0e0253
Merge branch 'release-17.5.2' into pg-tde-release-notes-1.0
Andriciuc Jun 27, 2025
00505e2
Merge branch 'release-17.5.2' into pg-tde-release-notes-1.0
Andriciuc Jun 27, 2025
b558f5e
Merge branch 'release-17.5.2' into pg-tde-release-notes-1.0
Andriciuc Jun 27, 2025
2a634e2
Merge branch 'release-17.5.2' into pg-tde-release-notes-1.0
Andriciuc Jun 30, 2025
5228cd6
Update release-notes-v1.0.md
Andriciuc Jun 30, 2025
67c00d5
Update release-notes-v1.0.md
Andriciuc Jun 30, 2025
628a61c
Update release-notes-v1.0.md
Andriciuc Jun 30, 2025
4c71095
Update release-notes-v1.0.md
Andriciuc Jun 30, 2025
a93c995
Merge branch 'release-17.5.2' into pg-tde-release-notes-1.0
Andriciuc Jun 30, 2025
d46f8c5
Merge branch 'release-17.5.2' into pg-tde-release-notes-1.0
Andriciuc Jun 30, 2025
f68b468
Update release-notes-v1.0.md
Andriciuc Jun 30, 2025
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
Update release-notes-v1.0.md
removed highlights, removed tickets that were to do from list, added wal beta mention in highlights
  • Loading branch information
Andriciuc authored Jun 30, 2025
commit 67c00d5b58e068a507538767986d676b474968c0
Original file line number Diff line number Diff line change
Expand Up @@ -10,35 +10,9 @@ The `pg_tde` by Percona extension brings in [Transparent Data Encryption (TDE)](

And **stable** for encrypting relational data in PostgreSQL using [Transparent Data Encryption (TDE)](../index/index.md). This milestone brings production-level data protection to PostgreSQL workloads.

* **Streaming and logical replication compatibility**
* **WAL encryption is still in Beta**

You can now use `pg_tde` in replication setups.

* **Improved performance testing & automation**

Bare-metal fuzz testing, performance benchmarking with CI/CD pipelines, and daily reporting integrations with Grafana and InfluxDB help ensure robustness and transparency.

* **Key management enhancements**

Added SQL-level functions and CLI tools for rotating, validating, and managing encryption keys. Now more compliant with PostgreSQL standards.

* **Better developer experience**

Contributor guides, PostgreSQL-style CLI, static analysis integration (Clang), and extensive refactoring improve maintainability and onboarding for new contributors.

* **Security hardened**

Sensitive metadata redaction, improved error messages, proper SQLSTATE codes, and stricter key validation increase security and clarity.

* **Major documentation updates**

The `pg_tde` documentation has received significant updates, which include:

- New configuration guides for Fortanix, Vault, KMIP and OpenBAO
- Reorganized and expanded topics for Architecture, GUC, Functions, TDE Operations and FAQ
- Extensive and numerous refinements and clarifications across the entire site

Explore the full documentation [in the official `pg_tde` documentations](https://docs.percona.com/pg-tde/index.html).
The WAL encryption feature is currently still in beta and is not effective unless explicitly enabled. **It is not yet production ready.** Do **not** enable this feature in production environments.

## Upgrade considerations

Expand All @@ -61,20 +35,14 @@ Adjust the limits with caution since it affects other processes running in your

- [PG-802](https://perconadev.atlassian.net/browse/PG-802) – Documented setting up streaming replication with `pg_tde`
- [PG-829](https://perconadev.atlassian.net/browse/PG-829) – Refactored and simplified key map code
- [PG-836](https://perconadev.atlassian.net/browse/PG-836) – Added custom wait events to writing to key files and key provider files
- [PG-1257](https://perconadev.atlassian.net/browse/PG-1257) – Added SQL function to remove the current principal key
- [PG-1292](https://perconadev.atlassian.net/browse/PG-1292) – Added a CI/CD performance test job in PSP GH repo
- [PG-1316](https://perconadev.atlassian.net/browse/PG-1316) – Integrated daily automated Performance Results with InfluxDB and Grafana
- [PG-1351](https://perconadev.atlassian.net/browse/PG-1351) – Documented how to decrypt old backups after the principal key was rotated
- [PG-1443](https://perconadev.atlassian.net/browse/PG-1443) – Made `pg_tde_change_key_provider` CLI utility follow PostgreSQL coding style
- [PG-1448](https://perconadev.atlassian.net/browse/PG-1448) – `pg_tde` now uses jsonc instead of the internal json API
- [PG-1351](https://perconadev.atlassian.net/browse/PG-1351) – Documented how to decrypt old backups after the principal key was rotated
- [PG-1464](https://perconadev.atlassian.net/browse/PG-1464) – Integrated the clang static analyzer for `pg_tde`

### Improvements

- [PG-953](https://perconadev.atlassian.net/browse/PG-953) – The tdemap code now allows the creation of duplicate keys
- [PG-1435](https://perconadev.atlassian.net/browse/PG-1435) – Improved error message explanations
- [PG-1499](https://perconadev.atlassian.net/browse/PG-1499) – Enhanced encryption metadata visibility in `pg_tde`
- [PG-1527](https://perconadev.atlassian.net/browse/PG-1527) – Added proper error codes for error messages in `pg_tde`
- [PG-1617](https://perconadev.atlassian.net/browse/PG-1617) – Removed relation key cache
- [PG-1635](https://perconadev.atlassian.net/browse/PG-1635) – User-facing TDE functions now return void
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We should probably mention @AndersAstrand 's API change here with creating keys being separated from setting them.

Expand Down
Loading
0