postgres

Commit Graph

Author	SHA1	Message	Date
Kai Wagner	fe513b1fd1	Add to FAQ how to rotate internal encryption keys (#573 ) Adding to the FAQ an answer about "How to rotate the internal keys". This was asked in the forum: https://forums.percona.com/t/how-to-rotate-internal-encryption-keys-in-pg-tde/39261 On top, dropping the duplicated FAQ entry about post-quantum encryption. Signed-off-by: Kai Wagner <kai.wagner@percona.com>	1 week ago
Dragos Andriciuc	307b33d656	Add WAL content for 2.0 release (#499 ) - remove (tech preview) - remove mentions of WAL being BETA and warning notes - add WAL tool support to limitations, improve flow, add button to setup - add limitation regarding WAL shipping standy not supported with WAL encryption - add mention of open source and enterprise ed being supported for pg_tde - add none method to basebackup and link to topic - add Example Patroni configuration for Patroni tool - improve supported vs unsupported tools section in Limitations	3 weeks ago
Dragos Andriciuc	516129122e	Reorganize toc / overview chapter / update topic headings (#468 ) Reorganized how the ToC website interaction is done by renaming index.md from CLI, architecture, advanced topics, KMS and Overview (index folder). This meant updating links in multiple other files as index files needed to be renamed for the structure to work. Reorganized how Overview is displayed, removed RC2 mention in Limitations, removed important note as it is no longer needed since it was an RC2 mention. Reworded the button texts for better interaction and user expectation in the Overview chapter topics. Added a short intro for Benefits of pg_tde topic, rewrote admonition. Updated KMS titles to reflect Percona Style Guide.	2 months ago
Dragos Andriciuc	dfcef9f1d2	Prepare general docs for GA release (#434 ) Updated the introduction with the proper extension name, updated the intro to reflect this. Removed important note about not meant for production and added the No upgrade warning from previous versions (like RC2) to GA. Updates: * removed the block announcement for RC2 at the top of the HTML page in the intro * Added the warning note before installation begins too. * Updated site name to full name.	2 months ago
Dragos Andriciuc	c94be04315	faq.md and wal_dump.md/encryption.md content improved (#437 ) - updated FAQ with WAL encryption notes about it's beta status - updated links to How does pg_tde make my data safe? FAQ for KMS chapters we added - updated pg_waldump with a note about wal encryption beta status - Removed post quantum question from FAQ	3 months ago
Dragos Andriciuc	ad80ac2c53	Documentation: standardized headers + pg_waldump cleanup (#406 ) Headers now do not have `pg_tde` mentioned (removed ``) and improved the text flow of pg_waldump. Other minor text fixes and linting done.	3 months ago
Dragos Andriciuc	03106ed2ed	Tde documentation updates for ga (#251 ) Modified the structure and overall presentation for the users to make it more accessible and future-proof as we improve pg_tde moving forward. Split big chapters into smaller chunks to improve SEO, renamed a couple of files for better visibility online and cleaned a bit of text. Integrated changes from: - https://github.com/percona/postgres/pull/314 - https://github.com/percona/postgres/pull/306 - Commit f636e82	4 months ago
Anastasia Alexadrova	afb7151860	Improved readability	5 months ago
Anastasia Alexandrova	86af45ed24	Doc improvements for RC release (#167 ) Doc improvements for RC release Fixed links, wording	6 months ago
Anastasia Alexandrova	3824063e66	Removed outdated install instructions (#101 ) Removed outdated install instructions: * Deleted build from source steps, * Updated Docker tab with the link to distro tutorial, * Added manual download tab with the link to Distro tutorial * Fixed broken links modified: contrib/pg_tde/documentation/docs/apt.md modified: contrib/pg_tde/documentation/docs/contribute.md modified: contrib/pg_tde/documentation/docs/faq.md modified: contrib/pg_tde/documentation/docs/install.md modified: contrib/pg_tde/documentation/docs/multi-tenant-setup.md modified: contrib/pg_tde/documentation/docs/release-notes/release-notes.md deleted: contrib/pg_tde/documentation/docs/switch.md modified: contrib/pg_tde/documentation/docs/yum.md	6 months ago
Andrew Pogrebnoi	d352e5af41	PG-1294 WAL: encrypt segment ranges This commit changes the approach to WAL encryption. Instead of encrypting each WAL page and keeping its header unencrypted with a special encrypted flag, this change moves encrypted/unencrypted bookkeeping to WAL internal keys. Now every [WAL] internal key has an additional field `start_lsn`. The field indicates the first WAL record that was encrypted with this key. This means everything starting from that LSN is encrypted with the key until the next or the end of the WAL. In order to have unencrypted WAL (when the user sets `pg_tde.wal_encrypt = off`), we insert a special key with the flag `TDE_KEY_TYPE_WAL_UNENCRYPTED`. The user can turn WAL encryption on and off, which will generate a new WAL key with the respective state (`TDE_KEY_TYPE_WAL_ENCRYPTED` or `TDE_KEY_TYPE_WAL_UNENCRYPTED `). If GUC pg_tde.wal_encrypt was changed, the server will generate a new WAL key with `start_lsn` set to `InvalidXLogRecPtr` on start. WAL writer, in turn, will update `start_lsn` with the actual LSN on the first write since the key creation. We use the current key _map and _dat files infrastructure along with the Internal key cache but with some special cases. There might be multiple internal keys for WAL but only one for the SMGR (relations, indexes etc). Creating a new WAL key, we write it the same as the SMGR key, so key rotation, for example, doesn't require any changes. But reads and start_lsn happen directly from/in _dat file (omitting _map). This needs revision and refactoring (along with _map, _dat files in general). As well as WAL keys cache, which is currently a simple linked list referencing the actual internal key case. That allows WAL key changing.	7 months ago
Andreas Karlsson	b96a7036ce	Write count() in a consistent way in our documentation We used to mix both uppercase and lowercase and sometimes put it in quotes. Here we settle on always using `SELECT count()` or `count(*)` as a short form.	7 months ago
Andreas Karlsson	73bb45ff0d	Improve consistency and clarity of how we refer to commands in our docs - Always use "ALTER SYSTEM" - Refer to subcommand of "ALTER TABLE" as "SET ACCESS METHOD" - Uppercase all keywords of DDL commands - Make sure commands use preformatted text	7 months ago
Zsolt Parragi	828a42a81b	PG-1354: Update documentation with latest changes (#46 )	7 months ago
Zsolt Parragi	5a1cfae10d	Moved pg_tde to contrib/pg_tde	8 months ago
Anastasia Alexandrova	8a199ca97f	PG-1206 Reworked intro to pg_tde (#353 ) * PG-1206 Reworked intro to pg_tde --------- Co-authored-by: Artem Gavrilov <artem.gavrilov@percona.com>	9 months ago

15 Commits (fe513b1fd16c89a1f950f4f9f035564d91279078)