#mysql-authentication

vtgate to vttablet: expired MySQL backend credentials and sandbox-mode error propagation across the connection pool

In a Vitess cluster, vtgate terminates the client MySQL protocol while vttablet brokers queries to a backing MySQL instance using its own configured application and administrative accounts. When a backend MySQL account is subject to password expiration or is scoped to a least-privilege role, the failure mode at the vtgate-to-vttablet boundary is not obvious:

Community & Careers · Editorial question

mysql-authenticationvitess