. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 76 Start a single keyspace cluster . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 77 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 79 Start a Single Keyspace Cluster . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 80 5 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 82 Connect to your cluster . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 74 Start a single keyspace cluster . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 74 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 77 Start a Single Keyspace Cluster . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 77 Setup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 79 Connect to your cluster . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 99 6 Start a Single Keyspace Cluster . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 99 Setup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 101 Connect to your cluster . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 105 Start a Single Keyspace Cluster . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 105

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 68 Start a single keyspace cluster . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 69 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 73 Start a Single Keyspace Cluster . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 74 Setup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 75 Connect to your cluster . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14 Start the Cluster . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17 Connect to your cluster . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18 Insert some data into the cluster . . . . . . . . . . . . . . about the sharding scheme underneath Vitess? . . . . . . . . . . . . . . . . . 39 I cannot start a cluster, and see these errors in the logs: Could not open required defaults file: /path/to/my.cnf . 40 Queries

about the sharding scheme underneath Vitess? . . . . . . . . . . . . . . . . . 26 I cannot start a cluster, and see these errors in the logs: Could not open required defaults file: /path/to/my.cnf . 26 Queries . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28 Start a single keyspace cluster . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31 Start a Single Keyspace Cluster . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32 Setup

about the sharding scheme underneath Vitess? . . . . . . . . . . . . . . . . . 22 I cannot start a cluster, and see these errors in the logs: Could not open required defaults file: /path/to/my.cnf . 23 Queries . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24 Start a single keyspace cluster . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25 . . . . 39 Start a Single Keyspace Cluster . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39 Connect to Your Cluster . . . . . . . . . . . . . . . . . .

about the sharding scheme underneath Vitess? . . . . . . . . . . . . . . . . . 27 I cannot start a cluster, and see these errors in the logs: Could not open required defaults file: /path/to/my.cnf . 27 Queries . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29 Start a single keyspace cluster . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34 Start a Single Keyspace Cluster . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35 Setup

testers and provided by the development team. Besides furnishing Cure53 with a Kubernetes-based cluster, locally installed systems were also used for testing. Access to all relevant code and documentation the attack surface minimal and selecting the language suited for this implementation. The auditors managed to reach wide-spanning coverage of all aspects pertinent to the main repository of the Vitess software 7d2ac2189573a7d26cf0f42e17df749673e3d16f ◦ The testers received unencumbered access to a Kubernetes test cluster hosted on Amazon Web Services, which was provided as a reference of an installation typical for

GetClusters") defer span.Finish() clusters, _ := api.getClustersForRequest(nil) vcs := make([]*vtadminpb.Cluster, 0, len(clusters)) for _, c := range clusters { if !api.authz.IsAuthorized(ctx, c.ID, rbac.ClusterResource ClusterResource, rbac.GetAction) { continue } 7 Vitess Security Audit, 2023 vcs = append(vcs, &vtadminpb.Cluster{ Id: c.ID, Name: c.Name, }) } return &vtadminpb.GetClustersResponse{ Clusters: vcs, }, nil a user to carry out the actions against the resources that match the RBAC rules specified by the cluster admin. Authentication and Authorization threat scenarios Having defined how authentication and authorization