• 4 min read

    Secure PostgreSQL 14 with CIS Benchmark

    Douglas Hunley

    Crunchy Data is proud to announce an update to the CIS PostgreSQL Benchmark by the Center for Internet Security ( CIS ). CIS is a nonprofit organization that publishes best practices and standards for securing modern technology and systems. This newly published CIS PostgreSQL 14 Benchmark ads to the existing CIS Benchmarks for PostgreSQL 9.5 - 13 and builds upon Crunchy Data's ongoing efforts with the PostgreSQL Security Technical Implementation Guide (PostgreSQL STIG ). A CIS Benchmark is...

    Read More
  • Database Security Best Practices on Kubernetes

    Jonathan S. Katz

    As more data workloads shift to running on Kubernetes , one of the important topics to consider is security of your data. Kubernetes brings many conveniences for securing workloads with the ability to extend security functionality databases through the use of the Operator pattern . Database security best practices on Kubernetes is a frequent conversation we're having with our customers around deploying PostgreSQL on Kubernetes with PGO , the open source Postgres Operator from Crunchy Dat...

    Read More
  • 4 min read

    Encrypting Postgres Data at Rest in Kubernetes

    Jonathan S. Katz

    Encrypting data at rest is often an important compliance task when working on securing your database system . While there are a lot of elements that go into securing a PostgreSQL database , encrypting data at rest helps to protect your data from various offline attacks including the stealing of a disk or tampering. Disk encryption is a popular feature among public database-as-a-service providers, including Crunchy Bridge, to protect data in a multi-tenant environment. There is ongoing work i...

    Read More
  • 5 min read

    Introducing the Crunchy Bridge CLI

    Craig Kerstiens

    Many years ago a group of colleagues and I latched onto this idea of flow and what it means for developer experiences. Flow was one of those things that was always hard to measure, but you could tell when it was right or wrong. It wasn’t about KPIs or deploy metrics, but it was about the overall efficiency of the process. A big part of flow when it came to DX was a great CLI experience. A great CLI is intuitive, it allows you to work efficiently while building on simplicity. A great CLI can be...

    Read More
  • 8 min read

    Projecting Monthly Revenue Run Rate in Postgres

    Jonathan S. Katz

    Monthly recurring revenue ( MRR ) and annual recurring revenue ( ARR ) are important metrics for a subscription-based business model. It allows for the business to project its available capital to make important decisions around expansion, hiring and more. In an on-demand subscription model, MRR can fluctuate on any given day. This is especially true in the cloud-services world, where people are constantly spinning up and down services. That's why it makes sense to try and capture what the su...

    Read More
  • 11 min read

    Multi-Cluster Postgres Federation on Kubernetes with Postgres 14 Using GitOp

    Jonathan S. Katz

    One of the reasons why I like deploying Postgres on Kubernetes with PGO , the open source Postgres Operator , is that it makes it easier to set up distributed database systems. One example is using Postgres for edge computing , and you can build an edge computing architecture with both Postgres and Debezium on Kubernetes. You can also do some fun things with logical replication and many read/write nodes. I posted an example of doing this last year about how you could set up an active...

    Read More
  • 4 min read

    Crunchy Bridge: UI Refresh, In-place Upgrades, Postgres 14

    Craig Kerstiens

    It's been a little over a year since we launched Crunchy Bridge. We've been busy over the past year, focusing on the foundations of Crunchy Bridge , ensuring solid resiliency, reducing our high availability failover times, making upgrades seamless and smooth. There has been a lot of activity over the past few months so we thought it was time for an update. Consider this the first of many more to come on what we're up to. First, a little on how we think about Postgres and databases in general....

    Read More
  • 7 min read

    PostgreSQL 14 on Kubernetes (with examples!)

    Jonathan S. Katz

    Last week PostgreSQL 14 became generally available to the public . The release contains a lot of cool stuff, including features that I can appreciate from my application development background like better JSON and multirange types . There are also a lot of little things that make PostgreSQL 14 a really cool release, and I encourage you to explore the release notes to find a feature that will make your life easier . Crunchy Bridge , our managed service available on Amazon, Microsoft, and...

    Read More
  • 6 min read

    Devious SQL: Dynamic DDL in PostgreSQL

    David Christensen

    Supporting PostgreSQL DBAs is an important part of daily life here at Crunchy Data . I’ve recently run across a few use cases where utility queries based on the current state of the database are needed. A simple example could be where you have a table that is the target of logical replication and the column becomes out of sync with the sequence that generated the data. This would result in new rows having primary key conflicts. To correct this issue, you would need to set the sequence to gene...

    Read More
  • Postgres 14: It's The Little Things

    Craig Kerstiens

    A lot of years Postgres will have some big pillar or theme to the release. Often this is thought of after the fact. Everything that is committed is looked at and someone thinks, "This is the key thing to talk about." In Postgres 9.2 it was JSON , in 9.4 it was JSONB, in 10 it was logical replication , 12 was a broader performance theme. While I look forward to each of these big highlights, in each release I'm equally excited to browse through and pull out the small things that simply make my l...

    Read More