Support pg_tde Transparent Data Encryption in init scripts - #64

Merged

souravbiswassanto merged 11 commits into

Jul 29, 2026

Commits on Jul 14, 2026

Support pg_tde Transparent Data Encryption in init scripts
tamalsaha
committed
a80a194
Set the file-provider principal key with the database-scoped setter
tamalsaha
committed
328d354

Commits on Jul 15, 2026

pg_tde: create principal key before setting it in bootstrap
tamalsaha
committed
a26b8a8
pg_tde: log which basebackup binary seeds the standby (debug visibility)
tamalsaha
committed
31ce18e
pg_tde: create principal key at the configured cipher length
tamalsaha
committed
c785370
pg_tde: export PGOPTIONS cipher for the whole bootstrap key block
tamalsaha
committed
5eddc73
pg_tde: crash-loop instead of keyless boot when bootstrap key setup fails
tamalsaha
committed
44a8c7c
tde: encrypt tables after failover and fail closed on file+WAL
tamalsaha
committed
fbfb33b
tde: set a server-wide default principal key so new databases inherit encryption
tamalsaha
committed
92e78e7
tde: gate the server default key on TDE_DEFAULT_AM/TDE_ENFORCE
tamalsaha
committed
17a6311
tde: honor the Vault Enterprise namespace in the key-provider registration
tamalsaha
committed
092a489