Merge pull request #5099 from EnterpriseDB/docs/tpa/refresh/tpa2327

Imported changes for TPA 23.27

product_docs/docs/tpa/23/INSTALL-repo.mdx

@@ -13,18 +13,18 @@ repository.
       order to receive EDB support for the software.
 
 To run TPA from source, you must install all of the dependencies
-(e.g., Python 3.6+) that the packages would handle for you, or download
+(e.g., Python 3.9+) that the packages would handle for you, or download
 the source and [run TPA in a Docker container](reference/INSTALL-docker/).
 (Either way will work fine on Linux and macOS.)
 
 ## Quickstart
 
-First, you must install the various dependencies Python 3, Python 
+First, you must install the various dependencies Python 3, Python
 venv, git, openvpn and patch. Installing from EDB repositories would
-would  install these automatically along with the TPA 
-packages.  
+would  install these automatically along with the TPA
+packages.
 
-Before you install TPA, you must install the required packages: 
+Before you install TPA, you must install the required packages:
 
 -   **Debian/Ubuntu** <br/> `sudo apt-get install python3 python3-pip python3-venv git openvpn patch`
 -   **Redhat, Rocky or AlmaLinux (RHEL7)** <br/> `sudo yum install python3 python3-pip epel-release git openvpn patch`
@@ -64,9 +64,9 @@ You now have tpaexec installed.
 
 ## Dependencies
 
-### Python 3.6+
+### Python 3.9+
 
-TPA requires Python 3.6 or later, available on most
+TPA requires Python 3.9 or later, available on most
 modern distributions. If you don't have it, you can use
 [pyenv](https://github.com/pyenv/pyenv) to install any version of Python
 you like without affecting the system packages.

product_docs/docs/tpa/23/INSTALL.mdx

@@ -117,7 +117,7 @@ sudo yum install tpaexec
 ```
 
 This will install TPA into `/opt/EDB/TPA`. It will also
-ensure that other required packages (e.g., Python 3.6 or later) are
+ensure that other required packages (e.g., Python 3.9 or later) are
 installed.
 
 We mention `sudo` here only to indicate which commands need root

product_docs/docs/tpa/23/reference/INSTALL-docker.mdx

@@ -7,7 +7,7 @@ originalFilePath: INSTALL-docker.md
 If you are using a system for which there are no [TPA
 packages](../INSTALL/) available, and it's difficult to run TPA after
 [installing from source](../INSTALL-repo/) (for example, because it's not
-easy to obtain a working Python 3.6+ interpreter), your last resort may
+easy to obtain a working Python 3.9+ interpreter), your last resort may
 be to build a Docker image and run TPA inside a Docker container.
 
 Please note that you do not need to run TPA in a Docker container in

product_docs/docs/tpa/23/reference/artifacts.mdx

@@ -14,13 +14,13 @@ cluster_vars:
     state: directory
     owner: root
     group: root
-    mode: 0755
+    mode: "0755"
   - type: file
     src: /host/path/to/file
     dest: /target/path/to/file
     owner: root
     group: root
-    mode: 0644
+    mode: "0644"
   - type: archive
     src: example.tar.gz
     dest: /some/target/path

product_docs/docs/tpa/23/reference/bdr.mdx

@@ -144,7 +144,7 @@ is mentioned in `bdr_node_groups`), it will join that group instead of
 ### bdr_commit_scopes
 
 This is an optional list of
-[commit scopes](https://www.enterprisedb.com/docs/pgd/latest/bdr/group-commit/)
+[commit scopes](https://www.enterprisedb.com/docs/pgd/latest/durability/group-commit/)
 that must exist in the PGD database (available for PGD 4.1 and above).
 
 ```yaml

product_docs/docs/tpa/23/reference/distributions.mdx

@@ -28,6 +28,12 @@ TPA and target systems on which TPA deploys the Postgres cluster.
 -   Ubuntu 18.04/bionic is a legacy distribution
 -   Ubuntu 16.04/xenial is a legacy distribution
 
+## Oracle Linux
+
+-   Oracle Linux 9.x is fully supported (docker only)
+-   Oracle Linux 8.x is fully supported (docker only)
+-   Oracle Linux 7.x is fully supported (docker only)
+
 ## RedHat x86
 
 -   RHEL/Rocky/AlmaLinux/Oracle Linux 9.x is fully supported (python3 only)

product_docs/docs/tpa/23/reference/reconciling-local-changes.mdx

@@ -87,7 +87,7 @@ undone unless they are:
 1.  Made in the `conf.d/9999-override.conf` file reserved for manual
     edits;
 2.  Made using `ALTER SYSTEM` SQL; or
-3.  Made [natively in TPA](#postgres_conf_settings) by adding
+3.  Made [natively in TPA](postgresql.conf/#postgres_conf_settings) by adding
     `postgres_conf_settings`.
 
 Other than the fact that option 3 is self-documenting and portable,

product_docs/docs/tpa/23/reference/tpaexec-deprovision.mdx

@@ -1,5 +1,5 @@
 ---
-title: 'tpaexec deprovision'
+title: tpaexec deprovision
 originalFilePath: tpaexec-deprovision.md
 
 ---

product_docs/docs/tpa/23/reference/tpaexec-download-packages.mdx

@@ -16,6 +16,14 @@ files for the target distribution package manager, so can be used
 exclusively to build clusters. At this time package managers Apt and YUM
 are supported.
 
+!!! Note
+    The download-packages feature requires Docker to be installed
+    on the TPA host. This is because the downloader operates by creating a
+    container of the target operating system and uses that system's package
+    manager to resolve dependencies and download all necessary packages. The
+    required Docker setup for download-packages is the same as that for
+    [using Docker as a deployment platform](#platform-docker).
+
 ## Usage
 
 An existing cluster configuration needs to exist which can be achieved

product_docs/docs/tpa/23/reference/tpaexec-reconfigure.mdx

@@ -5,16 +5,17 @@ originalFilePath: tpaexec-reconfigure.md
 ---
 
 The `tpaexec reconfigure` command reads config.yml and generates a
-revised version of it that changes the cluster from one architecture to
-another. [tpaexec upgrade](../tpaexec-upgrade/) may then be invoked to
-make the required changes on the instances that make up the cluster.
+revised version of it that changes the cluster in various ways according
+to its arguments.
 
 ## Arguments
 
 As with other tpaexec commands, the cluster directory must always be
 given.
 
-The following arguments control the contents of the new config.yml:
+## Changing a cluster's architecture
+
+The following arguments enable the cluster's architecture to be changed:
 
 -   `--architecture <architecture>`(required)
     The new architecture for the cluster. At present the only supported
@@ -30,6 +31,21 @@ The following arguments control the contents of the new config.yml:
     unnecessary to specify this; `tpaexec configure` will choose a suitable
     repository based on the postgres flavour in use in the cluster.
 
+After changing the architecture, run [tpaexec
+upgrade](../tpaexec-upgrade/) to make the required changes to the
+cluster.
+
+## Changing a cluster from 2q to EDB repositories
+
+The `--replace-2q-repositories` argument removes any 2ndQuadrant
+repositories the cluster uses and adds EDB repositories as required to
+replace them.
+
+After reconfiguring with this argument, run \[tpaexec
+deploy)(tpaexec-deploy.md) to make the required changes to the cluster.
+
+## Output format
+
 The following options control the form of the output:
 
 -   `--describe`

product_docs/docs/tpa/23/reference/volumes.mdx

@@ -289,7 +289,7 @@ instances:
       readahead: 65536
       owner: root
       group: root
-      mode: 0755
+      mode: "0755"
 ```
 
 You can specify the `fstype` (default: ext4), `fsopts` to be passed to

product_docs/docs/tpa/23/reference/yum_repositories.mdx

@@ -58,7 +58,7 @@ file yourself:
     dest: /etc/yum.repos.d/example.repo
     owner: root
     group: root
-    mode: 0644
+    mode: "0644"
     content: |
       [example]
       name=Example repo

product_docs/docs/tpa/23/rel_notes/index.mdx

@@ -2,6 +2,7 @@
 title: Trusted Postgres Architect release notes
 navTitle: "Release notes"
 navigation:
+ - tpa_23.27_rel_notes
  - tpa_23.26_rel_notes
  - tpa_23.25_rel_notes
  - tpa_23.24_rel_notes
@@ -24,6 +25,7 @@ The Trusted Postgres Architect documentation describes the latest version of Tru
 
 |           Version            | Release date |
 | ---------------------------- | ------------ |
+| [23.27](tpa_23.27_rel_notes) | 19 Dec 2023  |
 | [23.26](tpa_23.26_rel_notes) | 30 Nov 2023  |
 | [23.25](tpa_23.25_rel_notes) | 14 Nov 2023  |
 | [23.24](tpa_23.24_rel_notes) | 17 Oct 2023  |

product_docs/docs/tpa/23/rel_notes/tpa_23.27_rel_notes.mdx

@@ -0,0 +1,38 @@
+---
+title: Trusted Postgres Architect 23.27 release notes 
+navTitle: "Version 23.27"
+---
+
+Released: 19 Dec 2023
+
+!!! Note Migration to EDB repositories
+This release of TPA lays the groundwork for the decommissioning of the legacy 2ndQuadrant repositories. 
+Existing configurations that use the legacy repositories will continue to function until they are decommissioned, but a warning will be displayed.
+To update an existing configuration to use EDB Repos 2.0, you may use `tpaexec reconfigure --replace-2q-repositories`.
+!!!
+
+!!! Note Python interpreter
+TPA now runs using a Python interpreter provided by the `edb-python-39` package, which will be automatically installed as a dependency of the `tpaexec` package. 
+This allows us to keep TPA updated with security patches on older systems where the Python version is no longer widely supported.
+This is a completely standard build of Python 3.9. If you prefer, you may run TPA using another interpreter. 
+We recommend 3.9, versions older than 3.9 or newer than 3.11 are not supported.
+!!!
+
+New features, enhancements, bug fixes, and other changes in Trusted Postgres Architect 23.27 include the following:
+
+| Type | Description |
+| ---- |------------ |
+| Enhancement | TPA now supports Oracle Linux 7, 8 and 9 on Docker. |
+| Change | TPA now requires Python 3.9-3.11 and depends on the package `edb-python-39` to provide a suitable interpreter. |
+| Change | TPA will no longer configure any 2ndQuadrant repositories by default, instead it will select suitable repositories from EDB Repos 2.0. |
+| Change | TPA now provides a new `--replace-2q-repositories` argument to `tpaexec reconfigure` that will remove 2q repositories from an existing config.yml and add suitable EDB repositories for the cluster's postgres flavour and BDR version. |
+| Change | TPA now sets file system permissions explicitly on more objects. |
+| Change | A new variable `disable_repository_checks` can be set to true in config.yml to bypass the usual check for EDB repositories when deploying the PGD-Always-ON architecture. |
+| Change | TPA will now generate a primary_slot_name also on primary node to be used in case of switchover, to ensure the switched primary will have a physical slot on the new primary. |
+| Change | TPA will now ensure that commit_scope for CAMO enabled partners is generated using existing config options from older BDR versions when running tpaexec reconfigure command to prepare for major PGD upgrade. It also choses better defaults. |
+| Bug fix | Fixed an issue whereby postgres variables were rejected by Patroni due to validation rules. |
+| Bug fix | Fixed an issue whereby a user could not set a single `barman_client_dsn_attributes` with `sslmode=verify-full`. |
+| Bug Fix | TPA will now assign a lower default `maintenance_work_mem` to avoid out-of-memory errors. |
+
+
+