Support pg_tde Transparent Data Encryption in init scripts#64

Open

tamalsaha wants to merge 11 commits into

Commits on Jul 14, 2026

Support pg_tde Transparent Data Encryption in init scripts
tamalsaha
committed
Set the file-provider principal key with the database-scoped setter
tamalsaha
committed

Commits on Jul 15, 2026

pg_tde: create principal key before setting it in bootstrap
tamalsaha
committed
pg_tde: log which basebackup binary seeds the standby (debug visibility)
tamalsaha
committed
pg_tde: create principal key at the configured cipher length
tamalsaha
committed
pg_tde: export PGOPTIONS cipher for the whole bootstrap key block
tamalsaha
committed
pg_tde: crash-loop instead of keyless boot when bootstrap key setup fails
tamalsaha
committed
tde: encrypt tables after failover and fail closed on file+WAL
tamalsaha
committed
tde: set a server-wide default principal key so new databases inherit encryption
tamalsaha
committed
tde: gate the server default key on TDE_DEFAULT_AM/TDE_ENFORCE
tamalsaha
committed
tde: honor the Vault Enterprise namespace in the key-provider registration
tamalsaha
committed