other words, authentication and authorization are not enforced when using the web UI - VTAdmin-web - but when the web UI communicates with the server. If a threat actor is able to perform an action that Audit, 2023 VTAdmin-api The threat model of the VTAdmin-api has one trust boundary between the web ui and the VTAdmin-api. Once a request has been authenticated and authorized, it will not cross any further keyspaces can deny access to already existing keyspaces Moderate Yes 6 ADA-VIT-SA23-6 VTAdmin-web ui is not authenticated by default Moderate No 7 ADA-VIT-SA23-7 Critical 3rd-party dependency is archived

Zoopeeker server. Just specify the -server parameter to point to the Zookeeper servers. Note the vtctld UI can also be used to see the contents of the topology data. To configure a Zookeeper installation, visible from vtgate. • Restart all vtctld processes using the new topology service flags. So that the UI also shows the new data. Sample commands to migrate from deprecated zookeeper to zk2 topology would sql-max-length-errors int truncate queries in error logs to the given length (default unlimited) sql-max-length-ui int truncate queries in debug UIs to the given length (default 512) (default 512) stats_backend string

Zoopeeker server. Just specify the -server parameter to point to the Zookeeper servers. Note the vtctld UI can also be used to see the contents of the topology data. To configure a Zookeeper installation, visible from vtgate. • Restart all vtctld processes using the new topology service flags. So that the UI also shows the new data. Sample commands to migrate from deprecated zookeeper to zk2 topology would sql-max-length-errors int truncate queries in error logs to the given length (default unlimited) sql-max-length-ui int truncate queries in debug UIs to the given length (default 512) (default 512) stats_backend string

skew. This can affect user experience in applications where the VStream events are used to refresh UI, for example. For most applications where VStream API events feed into change data capture systems Zoopeeker server. Just specify the -server parameter to point to the Zookeeper servers. Note the vtctld UI can also be used to see the contents of the topology data. To configure a Zookeeper installation, visible from vtgate. • Restart all vtctld processes using the new topology service flags. So that the UI also shows the new data. Sample commands to migrate from deprecated zookeeper to zk2 topology would

skew. This can affect user experience in applications where the VStream events are used to refresh UI, for example. For most applications where VStream API events feed into change data capture systems Zoopeeker server. Just specify the -server parameter to point to the Zookeeper servers. Note the vtctld UI can also be used to see the contents of the topology data. To configure a Zookeeper installation, visible from vtgate. • Restart all vtctld processes using the new topology service flags. So that the UI also shows the new data. Sample commands to migrate from deprecated zookeeper to zk2 topology would

Zoopeeker server. Just specify the -server parameter to point to the Zookeeper servers. Note the vtctld UI can also be used to see the contents of the topology data. To configure a Zookeeper installation, visible from vtgate. • Restart all vtctld processes using the new topology service flags. So that the UI also shows the new data. Sample commands to migrate from deprecated zookeeper to zk2 topology would sql-max-length-errors int truncate queries in error logs to the given length (default unlimited) sql-max-length-ui int truncate queries in debug UIs to the given length (default 512) (default 512) stats_backend string

skew. This can affect user experience in applications where the VStream events are used to refresh UI, for example. For most applications where VStream API events feed into change data capture systems Zoopeeker server. Just specify the -server parameter to point to the Zookeeper servers. Note the vtctld UI can also be used to see the contents of the topology data. To configure a Zookeeper installation, visible from vtgate. • Restart all vtctld processes using the new topology service flags. So that the UI also shows the new data. Sample commands to migrate from deprecated zookeeper to zk2 topology would

/vitess/zone1 39 add zone1 CellInfo etcd start done... enter etcd2 env Starting vtctld... Access vtctld web UI at http://morgox1:15000 Send commands with: vtctlclient -server morgox1:15999 ... enter etcd2 env Starting Zoopeeker server. Just specify the -server parameter to point to the Zookeeper servers. Note the vtctld UI can also be used to see the contents of the topology data. To configure a Zookeeper installation, visible from vtgate. • Restart all vtctld processes using the new topology service flags. So that the UI also shows the new data. Sample commands to migrate from deprecated zookeeper to zk2 topology would

Zoopeeker server. Just specify the -server parameter to point to the Zookeeper servers. Note the vtctld UI can also be used to see the contents of the topology data. To configure a Zookeeper installation, visible from vtgate. • Restart all vtctld processes using the new topology service flags. So that the UI also shows the new data. Sample commands to migrate from deprecated zookeeper to zk2 topology would