# PG\_TDE in a everest deployment

**URL:** <https://forums.percona.com/t/pg-tde-in-a-everest-deployment/39485>\
**Category:** PG\_TDE – Transparent Data Encryption (TDE)\
**Created:** [October 2, 2025, 9:12am UTC](https://forums.percona.com/t/pg-tde-in-a-everest-deployment/39485 "2025-10-02T09:12:39Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![masterix](https://avatars.discourse-cdn.com/v4/letter/m/bb73d2/32.png) [@masterix](https://forums.percona.com/u/masterix)\
**Post date:** [October 2, 2025, 9:12am UTC](https://forums.percona.com/t/pg-tde-in-a-everest-deployment/39485/1 "2025-10-02T09:12:39Z")

</div>

Hello,

As it is explained in [https://www.percona.com/blog/encrypt-postgresql-data-at-rest-on-kubernetes/](https://www.percona.com/blog/encrypt-postgresql-data-at-rest-on-kubernetes/) it is possible to configure pg\_tde using the kubernetes operator. Does anyone know if it is also possible to configure it for a deployment which is managed by [https://www.percona.com/software/percona-everest](https://www.percona.com/software/percona-everest)? If so, how would I go about that?

Thanks!

---

<div class="post-metadata">

**Author:** ![masterix](https://avatars.discourse-cdn.com/v4/letter/m/bb73d2/32.png) [@masterix](https://forums.percona.com/u/masterix)\
**Post date:** [October 2, 2025, 10:56pm UTC](https://forums.percona.com/t/pg-tde-in-a-everest-deployment/39485/2 "2025-10-02T22:56:23Z")

</div>

After diving deeper into the documentation, I guess I need to run the following commands. I’ll see how it goes.

```auto
ALTER SYSTEM SET shared_preload_libraries = 'pg_tde';

# Reboot the postgres instances

CREATE EXTENSION pg_tde;

```

---

<div class="post-metadata">

**Author:** ![masterix](https://avatars.discourse-cdn.com/v4/letter/m/bb73d2/32.png) [@masterix](https://forums.percona.com/u/masterix)\
**Post date:** [October 2, 2025, 11:03pm UTC](https://forums.percona.com/t/pg-tde-in-a-everest-deployment/39485/3 "2025-10-02T23:03:32Z")

</div>

At least in my setup it doesn’t work, giving me.

using server 17.4 - Percona Server for PostgreSQL 17.4.1 (newest version possible with everest)

```auto
postgres=# CREATE EXTENSION pg_tde;
ERROR: pgaudit must be loaded via shared_preload_librarie

```

---

<div class="post-metadata">

**Author:** ![masterix](https://avatars.discourse-cdn.com/v4/letter/m/bb73d2/32.png) [@masterix](https://forums.percona.com/u/masterix)\
**Post date:** [October 2, 2025, 11:27pm UTC](https://forums.percona.com/t/pg-tde-in-a-everest-deployment/39485/4 "2025-10-02T23:27:48Z")

</div>

Setting these parameter in the database engine config did the trick

shared\_preload\_libraries = ‘pgaudit, pg\_tde’

---

<div class="post-metadata">

**Author:** ![Dragos\_Andriciuc](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/dragos_andriciuc/32/20787_2.png) [@Dragos\_Andriciuc](https://forums.percona.com/u/Dragos_Andriciuc)\
**Post date:** [October 3, 2025, 11:32am UTC](https://forums.percona.com/t/pg-tde-in-a-everest-deployment/39485/5 "2025-10-03T11:32:20Z")

</div>

Hi @masterix !

Congratulations on getting `pg_tde` working with your setup! 🎉

Was the documentation helpful in getting this configured? Do you have any feedback or suggestions on how we could make it clearer for deployments managed by Everest? (apart from the great info already delivered)

Thank you!

---

<div class="post-metadata">

**Author:** ![masterix](https://avatars.discourse-cdn.com/v4/letter/m/bb73d2/32.png) [@masterix](https://forums.percona.com/u/masterix)\
**Post date:** [October 3, 2025, 5:03pm UTC](https://forums.percona.com/t/pg-tde-in-a-everest-deployment/39485/6 "2025-10-03T17:03:18Z")

</div>

I think my confusion was mostly caused by the different documentations and I remember that it changed quite a bit from a few months ago. I wasn’t quite sure, that `pg_tde` was already shipped with the postgres version I selected in the setup, but it says it on nearly every page, except [1. Install pg\_tde - Percona Transparent Data Encryption for PostgreSQL](https://docs.percona.com/pg-tde/install.html) , were I found myself stuck for a while. 😅

Tho I must say, to make it more obvious, it would help if in the page mentioned above would also include the percona kubernetes operator / everest, just like the docker one.

---

<div class="post-metadata">

**Author:** ![Dragos\_Andriciuc](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/dragos_andriciuc/32/20787_2.png) [@Dragos\_Andriciuc](https://forums.percona.com/u/Dragos_Andriciuc)\
**Post date:** [October 7, 2025, 7:42am UTC](https://forums.percona.com/t/pg-tde-in-a-everest-deployment/39485/7 "2025-10-07T07:42:48Z")

</div>

Thank you @masterix! We will definitely add multiple installation setups, your help was greatly appreciated!

Have a nice day!