about the sharding scheme underneath Vitess? . . . . . . . . . . . . . . . . . 27 I cannot start a cluster, and see these errors in the logs: Could not open required defaults file: /path/to/my.cnf . 27 Queries . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29 Start a single keyspace cluster . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34 Start a Single Keyspace Cluster . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35 Setup

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14 Start the Cluster . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17 Connect to your cluster . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18 Insert some data into the cluster . . . . . . . . . . . . . . about the sharding scheme underneath Vitess? . . . . . . . . . . . . . . . . . 39 I cannot start a cluster, and see these errors in the logs: Could not open required defaults file: /path/to/my.cnf . 40 Queries

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 76 Start a single keyspace cluster . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 77 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 79 Start a Single Keyspace Cluster . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 80 5 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 82 Connect to your cluster . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 74 Start a single keyspace cluster . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 74 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 77 Start a Single Keyspace Cluster . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 77 Setup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 79 Connect to your cluster . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 68 Start a single keyspace cluster . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 69 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 73 Start a Single Keyspace Cluster . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 74 Setup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 75 Connect to your cluster . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 48 OnlineDDL & VTTablet state manager . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 48 General operations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 99 6 Start a Single Keyspace Cluster . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 99 Setup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 101 Connect to your cluster . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

about the sharding scheme underneath Vitess? . . . . . . . . . . . . . . . . . 26 I cannot start a cluster, and see these errors in the logs: Could not open required defaults file: /path/to/my.cnf . 26 Queries . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28 Start a single keyspace cluster . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31 Start a Single Keyspace Cluster . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32 Setup

about the sharding scheme underneath Vitess? . . . . . . . . . . . . . . . . . 22 I cannot start a cluster, and see these errors in the logs: Could not open required defaults file: /path/to/my.cnf . 23 Queries . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24 Start a single keyspace cluster . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25 . . . . 39 Start a Single Keyspace Cluster . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39 Connect to Your Cluster . . . . . . . . . . . . . . . . . .

GetClusters") defer span.Finish() clusters, _ := api.getClustersForRequest(nil) vcs := make([]*vtadminpb.Cluster, 0, len(clusters)) for _, c := range clusters { if !api.authz.IsAuthorized(ctx, c.ID, rbac.ClusterResource ClusterResource, rbac.GetAction) { continue } 7 Vitess Security Audit, 2023 vcs = append(vcs, &vtadminpb.Cluster{ Id: c.ID, Name: c.Name, }) } return &vtadminpb.GetClustersResponse{ Clusters: vcs, }, nil a user to carry out the actions against the resources that match the RBAC rules specified by the cluster admin. Authentication and Authorization threat scenarios Having defined how authentication and authorization

testers and provided by the development team. Besides furnishing Cure53 with a Kubernetes-based cluster, locally installed systems were also used for testing. Access to all relevant code and documentation 7d2ac2189573a7d26cf0f42e17df749673e3d16f ◦ The testers received unencumbered access to a Kubernetes test cluster hosted on Amazon Web Services, which was provided as a reference of an installation typical for leak issues in general, would need to be considered as low. • The configuration of the Kubernetes cluster deployment was investigated for common problems like AllowPrivilegeEscalation, the application of