Freedom251 › Database Administration Tools
Trusted Postgres Architect
What Trusted Postgres Architect is
Trusted Postgres Architect (TPA) is a free, open-source orchestration tool for deploying and managing Postgres clusters. It uses Ansible and declarative YAML to describe a cluster's topology and configuration. TPA can provision AWS EC2 instances or Docker containers, or use existing servers and virtual machines when connection details are supplied. It installs and configures Postgres and related components, including replication and backups; depending on the architecture, these can include PGD, Barman, PgBouncer, repmgr, and extensions. TPA can run tests suited to the architecture and platform, apply configuration changes, perform switchovers, and carry out documented zero-downtime minor-version upgrades. Its configuration documentation lists PostgreSQL, EDB Postgres Extended, and EDB Postgres Advanced Server versions 13 through 18. STIG and CIS configuration options are available, but EDB does not guarantee they ensure compliance with those standards. TPA supports deployment and upgrades through Red Hat Ansible Automation Platform only on bare-metal platforms. It does not support major-version Postgres upgrades through the `tpaexec upgrade` command, a constraint to account for when planning database upgrades.
Who it suits
TPA suits teams deploying Postgres clusters on self-hosted Linux, from quick testbeds to production environments. It may suit operators who want Ansible-based provisioning and cluster management, provided they handle major-version upgrades outside `tpaexec upgrade`.
What it does well
- Declarative YAML describes cluster topology and configuration
- Can provision EC2, Docker, or use existing servers
- Includes replication and backup setup
- Supports switchovers and minor-version upgrades
- STIG and CIS configuration options are available
What to know first
- Major-version upgrades are unsupported by `tpaexec upgrade`
- Automation Platform support is limited to bare metal
- STIG and CIS options do not guarantee compliance
Limits
TPA supports minor-version upgrades described as zero-downtime, but `tpaexec upgrade` does not support major-version Postgres upgrades. Ansible Automation Platform deploy and upgrade support is limited to bare-metal platforms.
Plans
| Plan | Billed and limits | Price |
|---|---|---|
| Trusted Postgres Architect | No price or plan limits stated on the opened product pages | Free |
As enterprisedb.com lists them, read 30 Sept 2026. The maker's own page has the final word.
Getting started
- Open the TPA documentation website.
- Use a self-hosted Linux environment.
- Describe the cluster topology and configuration in declarative YAML.
- Supply connection details to use existing servers or virtual machines, or configure provisioning for AWS EC2 instances or Docker containers.
- Deploy the cluster with TPA.
Verdict
TPA provides Ansible-driven provisioning and operational tasks for Postgres clusters, with options for cloud, containers, and existing infrastructure. Its major-version upgrade limitation and non-guarantee of compliance should shape deployment and security plans.
Questions
How much does Trusted Postgres Architect cost?
TPA is free and open source.
Which database versions does it support?
Its configure documentation lists PostgreSQL, EDB Postgres Extended, and EDB Postgres Advanced Server versions 13 through 18.
Where can I deploy it?
TPA supports self-hosted Linux deployments. It can provision AWS EC2 instances and Docker containers or work with existing servers and virtual machines when connection details are supplied.
Can TPA upgrade Postgres?
It supports minor-version upgrades described as zero-downtime. The `tpaexec upgrade` command does not support major-version upgrades.
Does it support security configurations?
TPA offers STIG and CIS configuration options, but EDB does not guarantee that these options make a cluster meet either standard.
Who makes TPA?
EDB makes Trusted Postgres Architect. EDB was founded in 2004 and is headquartered in Wilmington, Delaware, United States.
Facts from Trusted Postgres Architect's own pages
- Automation Platform integration
- TPA supports deploy and upgrade steps through Red Hat Ansible Automation Platform, with support limited to bare-metal platforms. · enterprisedb.com, 30 Sept 2026
- Cluster management
- TPA supports configuration changes, switchovers, and minor-version upgrades described as zero-downtime. · enterprisedb.com, 30 Sept 2026
- Components
- Depending on the architecture, associated components include PGD, Barman, PgBouncer, repmgr, and Postgres extensions. · enterprisedb.com, 30 Sept 2026
- Configuration
- It uses declarative YAML configuration to describe a cluster from its topology through configuration details. · enterprisedb.com, 30 Sept 2026
- Credential protection
- TPA generates a cluster-specific Ansible Vault password to encrypt sensitive variables, and the documented system keyring option stores that password in a system keyring backend. · enterprisedb.com, 30 Sept 2026
- Deployment
- TPA installs and configures Postgres and associated components, including replication and backups. · enterprisedb.com, 30 Sept 2026
- Extensibility
- Users can add custom Ansible commands, tests, and deployment hook scripts. · enterprisedb.com, 30 Sept 2026
- Founded
- 2004 · enterprisedb.com, 28 Sept 2026
- Headquarters
- Wilmington, Delaware, United States · enterprisedb.com, 28 Sept 2026
- Intended users
- EDB describes TPA recommendations as suitable for both quick testbed setups and production environments. · enterprisedb.com, 30 Sept 2026
- Maker
- EDB's 2025 blog says the company was founded in 2004 and gives its mailing address as Wilmington, Delaware. · enterprisedb.com, 30 Sept 2026
- Platforms
- The documentation lists AWS, bare metal, and Docker as TPA platforms and says clusters can span multiple platforms. · enterprisedb.com, 30 Sept 2026
- Provisioning
- TPA can provision AWS EC2 instances and Docker containers or use existing servers and virtual machines when connection details are supplied. · enterprisedb.com, 30 Sept 2026
- Purpose
- TPA is an Ansible-based orchestration tool that deploys Postgres clusters according to EDB recommendations. · enterprisedb.com, 30 Sept 2026
- Security
- TPA offers STIG and CIS configuration options, but EDB says these do not guarantee that a cluster fulfils the relevant standard. · enterprisedb.com, 30 Sept 2026
- Supported database versions
- The configure documentation lists PostgreSQL, EDB Postgres Extended, and EDB Postgres Advanced Server versions 13 through 18. · enterprisedb.com, 30 Sept 2026
- Testing
- TPA runs architecture and platform-specific tests against a deployed cluster. · enterprisedb.com, 30 Sept 2026
- Upgrade limitation
- The upgrade documentation says TPA does not support major-version upgrades of Postgres through the `tpaexec upgrade` command. · enterprisedb.com, 30 Sept 2026
Where Trusted Postgres Architect stands on Freedom251
- Database Administration Tools#12 of 34