Using

• Bootstrap
  • The bootstrap section
  • The externalClusters section
    • Password files
  • Bootstrap an empty cluster (initdb )
    • Passing Options to initdb
    • Executing Queries After Initialization
    • Compatibility Features
  • Bootstrap from another cluster
    • Bootstrap from a backup (recovery )
    • Bootstrap from a live cluster (pg_basebackup )
    • Requirements
    • About the replication user
    • Username/Password authentication
    • TLS certificate authentication
    • Configure the application database
    • Current limitations
• Importing Postgres databases
  • How it works
  • The microservice type
  • The monolith type
  • Import optimizations
  • Customizing pg_dump and pg_restore Behavior
  • Online Import and Upgrades
• Security
  • Code
  • Container
    • Guidelines and Frameworks for Container Security
  • Cluster
    • Role Based Access Control (RBAC)
    • Deployments and ClusterRole Resources
    • Why Are ClusterRole Permissions Needed?
    • Calls to the API server made by the instance manager
    • Pod Security Policies
    • Restricting Pod access using AppArmor
    • Network Policies
    • Exposed Ports
    • PostgreSQL
    • Storage
• Postgres instance manager
  • Startup, Liveness, and Readiness Probes
    • Startup Probe
    • Liveness Probe
    • Readiness Probe
  • Shutdown control
    • Shutdown of the primary during a switchover
  • Failover
  • Disk Full Failure
• Scheduling
  • Pod Affinity and Anti-Affinity
    • Requiring Pod Anti-Affinity
    • Topology Considerations
    • Disabling Anti-Affinity Policies
    • Fine-Grained Control with Custom Rules
  • Node selection through nodeSelector
  • Tolerations
  • Isolating PostgreSQL workloads
• Resource management
• Failure Modes
  • Self-Healing
    • Primary Failure
    • Standby Failure
  • Manual Intervention
    • Disabling Reconciliation
• Rolling Updates
  • Automated updates (unsupervised )
  • Manual updates (supervised )
• Replication
  • Application-level replication
  • A very mature technology
  • Streaming replication support
    • Continuous backup integration
  • Synchronous Replication
    • Quorum-based Synchronous Replication
    • Example
    • Migrating from Deprecated Synchronous Replication Implementation
    • Priority-based Synchronous Replication
    • Controlling synchronous_standby_names Content
    • Examples
    • Data Durability and Synchronous Replication
    • Required Data Durability
    • Preferred Data Durability
  • Synchronous Replication (Deprecated)
    • Select nodes for synchronous replication
  • Replication slots
    • Replication slots for High Availability
    • User-Defined Replication slots
    • Synchronization frequency
    • Capping the WAL size retained for replication slots
    • Monitoring replication slots
• Backup
  • WAL archive
  • Cold and Hot backups
  • Object stores or volume snapshots: which one to use?
  • Scheduled backups
  • On-demand backups
  • Backup from a standby
• Recovery
  • Recovery from an object store
  • Recovery from VolumeSnapshot objects
  • Recovery from a Backup object
  • Additional Considerations
  • Point in time recovery (PITR)
    • PITR from an object store
    • PITR from VolumeSnapshot objects
    • Recovery targets
  • Configure the application database
  • How recovery works under the hood
  • Restoring into a cluster with a backup section
• Backup on volume snapshots
  • About standard Volume Snapshots
  • Requirements
  • How to configure Volume Snapshot backups
  • Hot and cold backups
    • Overriding the default behavior
  • Persistence of volume snapshot objects
  • Example
• Backup on object stores
  • Common object stores
  • Retention policies
  • Compression algorithms
  • Tagging of backup objects
  • Extra options for the backup and WAL commands
• WAL archiving
• PostgreSQL Role Management
  • Password management
    • Password expiry, VALID UNTIL
    • Password hashed
  • Unrealizable role configurations
  • Status of managed roles
• Storage
  • Backup and recovery
  • Benchmarking EDB Postgres for Kubernetes
  • Encryption at rest
  • Persistent Volume Claim (PVC)
  • Configuration via a storage class
  • Configuration via a PVC template
  • Volume for WAL
  • Volumes for tablespaces
  • Volume expansion
    • Using the volume expansion Kubernetes feature
    • Expanding PVC volumes on AKS
    • Workaround for volume expansion on AKS
    • Re-creating storage
  • Static provisioning of persistent volumes
  • Block storage considerations (Ceph/Longhorn)
• Labels and annotations
  • Predefined labels
  • Predefined annotations
  • Prerequisites
  • Defining cluster’s metadata
  • Current limitations
• Monitoring
  • Monitoring Instances
    • Prometheus Operator example
    • Enabling TLS on the Metrics Port
    • Predefined set of metrics
    • User defined metrics
    • Example of a user defined metric
    • Example of a user defined metric with predicate query
    • Example of a user defined metric running on multiple databases
    • Structure of a user defined metric
    • Output of a user defined metric
    • Default set of metrics
    • Differences with the Prometheus Postgres exporter
  • Monitoring the operator
    • Prometheus Operator example
  • How to inspect the exported metrics
  • Auxiliary resources
  • Monitoring on OpenShift
• Logging
  • Cluster Logs
  • Operator Logs
  • PostgreSQL Logs
  • PGAudit Logs
  • EDB Audit logs
  • Other Logs
• Certificates
  • Operator-Managed Mode
    • Server certificates
    • Server CA secret
    • Server TLS secret
    • Server alternative DNS names
    • Client certificates
    • Client CA secret
    • Client streaming_replica certificate
  • User-provided certificates mode
    • Server certificates
    • Example
    • Cert-manager example
    • Client certificate
    • Cert-manager example
• Client TLS/SSL connections
  • Issuing a new certificate
  • Testing the connection via a TLS certificate
  • About TLS protocol versions
• Connecting from an application
  • DNS resolution
  • Environment variables
  • Secrets
• Connection pooling
  • Architecture
  • Quick start
  • Pooler resource lifecycle
  • Security
    • Certificates
  • Authentication
  • Pod templates
  • Service Template
  • High availability (HA)
  • PgBouncer configuration options
  • Monitoring
  • Logging
  • Pausing connections
  • Limitations
    • Single PostgreSQL cluster
    • Controlled configurability
• Replica clusters
  • Basic Concepts
    • About PostgreSQL Roles
    • Bootstrapping a Replica Cluster
    • Configuring Replication
    • Defining an External Cluster
    • Backup and Symmetric Architectures
    • Distributed Architecture Flexibility
  • Setting Up a Replica Cluster
  • Distributed Topology
    • Planning for a Distributed PostgreSQL Database
    • Demoting a Primary to a Replica Cluster
    • Promoting a Replica to a Primary Cluster
  • Standalone Replica Clusters
    • Main Differences with Distributed Topology
    • Example of Standalone Replica Cluster using pg_basebackup
    • Example of Standalone Replica Cluster from an object store
    • Example using a Volume Snapshot
  • Delayed replicas
• Kubernetes Upgrade and Maintenance
  • Importance of Regular Updates
  • Maintenance Operations in a Cluster
  • Temporary PostgreSQL Cluster Degradation
  • Pod Disruption Budgets
  • PostgreSQL Clusters used for Development or Testing
  • Node Maintenance Window
    • Single instance clusters with reusePVC set to false
• EDB Postgres for Kubernetes Plugin
  • Install
    • Via the installation script
    • Using the Debian or RedHat packages
    • Debian packages
    • RPM packages
    • Supported Architectures
    • Configuring auto-completion
    • Configuring auto-completion
  • Use
    • Generation of installation manifests
    • Status
    • Promote
    • Certificates
    • Restart
    • Reload
    • Maintenance
    • Report
    • report Operator
    • report Cluster
    • Logs
    • Cluster logs
    • Pretty
    • Destroy
    • Cluster hibernation
    • Benchmarking the database with pgbench
    • Benchmarking the storage with fio
    • Requesting a new physical backup
    • Launching psql
    • Using pgAdmin4 for evaluation/demonstration purposes only
    • Logical Replication Publications
    • Creating a new publication
    • Dropping a publication
    • Logical Replication Subscriptions
    • Creating a new subscription
    • Dropping a subscription
    • Synchronizing sequences
  • Integration with K9s
  • Permissions required by the plugin
    • Role examples
• Automated failover
  • RTO and RPO impact
  • Delayed failover
• Fencing
  • How to fence instances
  • How to lift fencing
  • How fencing works
• Declarative hibernation
  • Hibernation
  • Rehydration
• PostGIS
  • Basic concepts about a PostGIS cluster
  • Create a new PostgreSQL cluster with PostGIS
• Container Image Requirements
  • Image Tag Requirements
• Custom Pod Controller
  • PVC resizing
  • Primary Instances versus Replicas
  • Coherence of PVCs
  • Local storage, remote storage, and database size
• Networking
  • Cross-namespace network policy for the operator
  • Cross-cluster networking
• Benchmarking
  • pgbench
  • fio