Trusted Postgres Architect
enterprisedb.com
What it is
Trusted Postgres Architect (TPA) is a free, Ansible-based tool for deploying and managing Postgres clusters using EDB recommendations. Users describe cluster topology and configuration in declarative YAML. TPA can provision AWS EC2 instances and Docker containers, or use existing servers and virtual machines when connection details are supplied. It installs and configures Postgres and related components, including replication and backups; architecture-dependent components can include PGD, Barman, PgBouncer, repmgr, and Postgres extensions. TPA can run tests specific to the cluster architecture and platform, apply configuration changes, perform switchovers, and carry out documented zero-downtime minor-version upgrades. Its configuration documentation lists PostgreSQL, EDB Postgres Extended, and EDB Postgres Advanced Server versions 13 through 18. The tool supports self-hosted Linux deployments and offers STIG and CIS configuration options, though these do not guarantee that a cluster meets those standards. TPA does not support major-version Postgres upgrades through the `tpaexec upgrade` command. Users can extend it with custom Ansible commands, tests, and deployment hook scripts.
Spec sheet
- Purpose
- TPA is an Ansible-based orchestration tool that deploys Postgres clusters according to EDB recommendations.Read 30 Sep 2026 · enterprisedb.com
- Intended users
- EDB describes TPA recommendations as suitable for both quick testbed setups and production environments.Read 30 Sep 2026 · enterprisedb.com
- Platforms
- The documentation lists AWS, bare metal, and Docker as TPA platforms and says clusters can span multiple platforms.Read 30 Sep 2026 · enterprisedb.com
- Deployment
- TPA installs and configures Postgres and associated components, including replication and backups.Read 30 Sep 2026 · enterprisedb.com
- Security
- TPA offers STIG and CIS configuration options, but EDB says these do not guarantee that a cluster fulfils the relevant standard.Read 30 Sep 2026 · enterprisedb.com
- Headquarters
- Wilmington, Delaware, United StatesRead 28 Sep 2026 · enterprisedb.com
- Founded
- 2004Read 28 Sep 2026 · enterprisedb.com
- Maker
- EDB's 2025 blog says the company was founded in 2004 and gives its mailing address as Wilmington, Delaware.Read 30 Sep 2026 · enterprisedb.com
- Automation Platform integration
- TPA supports deploy and upgrade steps through Red Hat Ansible Automation Platform, with support limited to bare-metal platforms.Read 30 Sep 2026 · enterprisedb.com
- Cluster management
- TPA supports configuration changes, switchovers, and minor-version upgrades described as zero-downtime.Read 30 Sep 2026 · enterprisedb.com
- Components
- Depending on the architecture, associated components include PGD, Barman, PgBouncer, repmgr, and Postgres extensions.Read 30 Sep 2026 · enterprisedb.com
- Configuration
- It uses declarative YAML configuration to describe a cluster from its topology through configuration details.Read 30 Sep 2026 · enterprisedb.com
- Credential protection
- TPA generates a cluster-specific Ansible Vault password to encrypt sensitive variables, and the documented system keyring option stores that password in a system keyring backend.Read 30 Sep 2026 · enterprisedb.com
- Extensibility
- Users can add custom Ansible commands, tests, and deployment hook scripts.Read 30 Sep 2026 · enterprisedb.com
- Provisioning
- TPA can provision AWS EC2 instances and Docker containers or use existing servers and virtual machines when connection details are supplied.Read 30 Sep 2026 · enterprisedb.com
- Supported database versions
- The configure documentation lists PostgreSQL, EDB Postgres Extended, and EDB Postgres Advanced Server versions 13 through 18.Read 30 Sep 2026 · enterprisedb.com
- Testing
- TPA runs architecture and platform-specific tests against a deployed cluster.Read 30 Sep 2026 · enterprisedb.com
- Upgrade limitation
- The upgrade documentation says TPA does not support major-version upgrades of Postgres through the `tpaexec upgrade` command.Read 30 Sep 2026 · enterprisedb.com
Plans and prices
Strong points and limits
Strong points
- Cluster topology and configuration are defined in YAML
- Can provision EC2 instances or Docker containers
- Supports configuration changes and switchovers
- Supports documented zero-downtime minor-version upgrades
Limits
- Major-version upgrades are not supported by `tpaexec upgrade`
- STIG and CIS options do not guarantee compliance
- Ansible Automation Platform support is limited to bare-metal platforms
Who it suits
TPA suits teams deploying Postgres clusters on self-hosted Linux, from testbed setups to production environments. It may also suit operators who need configuration-driven cluster management and minor-version upgrades.
Verdict
TPA offers configuration-driven deployment and management for Postgres clusters, with provisioning options and support for minor-version upgrades. Plan major-version upgrades separately, and do not treat its STIG or CIS options as proof of compliance.
Where Specifiction places it
- Database Administration Tools#19 of 347.5