Skip to content
SPECIFICTION
Get listed

Trusted Postgres Architect

enterprisedb.com

Free plan LinuxSelf-hosted

What it is

Trusted Postgres Architect (TPA) is a free, Ansible-based tool for deploying and managing Postgres clusters using EDB recommendations. Users describe cluster topology and configuration in declarative YAML. TPA can provision AWS EC2 instances and Docker containers, or use existing servers and virtual machines when connection details are supplied. It installs and configures Postgres and related components, including replication and backups; architecture-dependent components can include PGD, Barman, PgBouncer, repmgr, and Postgres extensions. TPA can run tests specific to the cluster architecture and platform, apply configuration changes, perform switchovers, and carry out documented zero-downtime minor-version upgrades. Its configuration documentation lists PostgreSQL, EDB Postgres Extended, and EDB Postgres Advanced Server versions 13 through 18. The tool supports self-hosted Linux deployments and offers STIG and CIS configuration options, though these do not guarantee that a cluster meets those standards. TPA does not support major-version Postgres upgrades through the `tpaexec upgrade` command. Users can extend it with custom Ansible commands, tests, and deployment hook scripts.

Spec sheet

Purpose
TPA is an Ansible-based orchestration tool that deploys Postgres clusters according to EDB recommendations.Read 30 Sep 2026 · enterprisedb.com
Intended users
EDB describes TPA recommendations as suitable for both quick testbed setups and production environments.Read 30 Sep 2026 · enterprisedb.com
Platforms
The documentation lists AWS, bare metal, and Docker as TPA platforms and says clusters can span multiple platforms.Read 30 Sep 2026 · enterprisedb.com
Deployment
TPA installs and configures Postgres and associated components, including replication and backups.Read 30 Sep 2026 · enterprisedb.com
Security
TPA offers STIG and CIS configuration options, but EDB says these do not guarantee that a cluster fulfils the relevant standard.Read 30 Sep 2026 · enterprisedb.com
Headquarters
Wilmington, Delaware, United StatesRead 28 Sep 2026 · enterprisedb.com
Founded
2004Read 28 Sep 2026 · enterprisedb.com
Maker
EDB's 2025 blog says the company was founded in 2004 and gives its mailing address as Wilmington, Delaware.Read 30 Sep 2026 · enterprisedb.com
Automation Platform integration
TPA supports deploy and upgrade steps through Red Hat Ansible Automation Platform, with support limited to bare-metal platforms.Read 30 Sep 2026 · enterprisedb.com
Cluster management
TPA supports configuration changes, switchovers, and minor-version upgrades described as zero-downtime.Read 30 Sep 2026 · enterprisedb.com
Components
Depending on the architecture, associated components include PGD, Barman, PgBouncer, repmgr, and Postgres extensions.Read 30 Sep 2026 · enterprisedb.com
Configuration
It uses declarative YAML configuration to describe a cluster from its topology through configuration details.Read 30 Sep 2026 · enterprisedb.com
Credential protection
TPA generates a cluster-specific Ansible Vault password to encrypt sensitive variables, and the documented system keyring option stores that password in a system keyring backend.Read 30 Sep 2026 · enterprisedb.com
Extensibility
Users can add custom Ansible commands, tests, and deployment hook scripts.Read 30 Sep 2026 · enterprisedb.com
Provisioning
TPA can provision AWS EC2 instances and Docker containers or use existing servers and virtual machines when connection details are supplied.Read 30 Sep 2026 · enterprisedb.com
Supported database versions
The configure documentation lists PostgreSQL, EDB Postgres Extended, and EDB Postgres Advanced Server versions 13 through 18.Read 30 Sep 2026 · enterprisedb.com
Testing
TPA runs architecture and platform-specific tests against a deployed cluster.Read 30 Sep 2026 · enterprisedb.com
Upgrade limitation
The upgrade documentation says TPA does not support major-version upgrades of Postgres through the `tpaexec upgrade` command.Read 30 Sep 2026 · enterprisedb.com

Plans and prices

Trusted Postgres Architect Free No price or plan limits stated on the opened product pages Read 30 Sep 2026 · enterprisedb.com

Every Trusted Postgres Architect plan and price →

Strong points and limits

Strong points

  • Cluster topology and configuration are defined in YAML
  • Can provision EC2 instances or Docker containers
  • Supports configuration changes and switchovers
  • Supports documented zero-downtime minor-version upgrades

Limits

  • Major-version upgrades are not supported by `tpaexec upgrade`
  • STIG and CIS options do not guarantee compliance
  • Ansible Automation Platform support is limited to bare-metal platforms

Who it suits

TPA suits teams deploying Postgres clusters on self-hosted Linux, from testbed setups to production environments. It may also suit operators who need configuration-driven cluster management and minor-version upgrades.

Verdict

TPA offers configuration-driven deployment and management for Postgres clusters, with provisioning options and support for minor-version upgrades. Plan major-version upgrades separately, and do not treat its STIG or CIS options as proof of compliance.

Where Specifiction places it

Alternatives to Trusted Postgres ArchitectAll alternatives →