Editorial question107.6K views3,304 votes0 answers4,194 following
AI-generatedvtgate to vttablet: expired MySQL backend credentials and sandbox-mode error propagation across the connection pool
In a Vitess cluster, vtgate terminates the client MySQL protocol while vttablet brokers queries to a backing MySQL instance using its own configured application and administrative accounts. When a backend MySQL account is subject to password expiration or is scoped to a least-privilege role, the failure mode at the vtgate-to-vttablet boundary is not obvious: