which are assumed to provide a distributed, consistent key-value store. The default topology service plugin is etcd2. The topology service exists for several reasons: 14 • It enables tablets to coordinate Documentation • Execution Plans vtworker vtworker hosts long-running processes. It supports a plugin architecture and offers libraries so that you can easily choose tablets to use. Plugins are available cluster, and provide cluster-wide locks. It also supports watches, and master election. Vitess uses a plugin implementation to support multiple backend technologies for the Topology Service (etcd, ZooKeeper

which are assumed to provide a distributed, consistent key-value store. The default topology service plugin is etcd2. The topology service exists for several reasons: • It enables tablets to coordinate among cluster, and provide cluster-wide locks. It also supports watches, and master election. Vitess uses a plugin implementation to support multiple backend technologies for the Topology Service (etcd, ZooKeeper respective directory. 78 etcd etcd2 implementation (new version of etcd) This topology service plugin is meant to use etcd clusters as storage backend for the topology data. This topology service supports

which are assumed to provide a distributed, consistent key-value store. The default topology service plugin is etcd2. The topology service exists for several reasons: • It enables tablets to coordinate among are not supported. Authentication Plugins Vitess supports the mysql_native_password authentication plugin. Support for caching_sha2_password can be tracked in #5399. Transport Security To configure VTGate DATABASE queries out of the box. But, to make it possible to provision databases, a plugin mechanism exists. The plugin has to take care of creating and dropping the database, and update the topology & VSchema

which are assumed to provide a distributed, consistent key-value store. The default topology service plugin is etcd2. The topology service exists for several reasons: • It enables tablets to coordinate among are not supported. Authentication Plugins Vitess supports the mysql_native_password authentication plugin. Support for caching_sha2_password can be tracked in #5399. Transport Security To configure VTGate DATABASE queries out of the box. But, to make it possible to provision databases, a plugin mechanism exists. The plugin has to take care of creating and dropping the database, and update the topology & VSchema

Vitess links to an example authentication plugin which is available here: https://gist.github.com/ajm188/5b2c7d3ca76004a297e6e279a54c2299. This example plugin extracts the actor from either the context from a cookie. 6 Vitess Security Audit, 2023 When a Vitess administrator adds an authentication plugin, VTAdmin-api adds it as a middleware at the http mux layer. VTAdmin-api does this in vitess/go/vt/vtadmin/api the routes are initialized: First VTAdmin-api checks if the user has registered an authentication plugin: And later, it gets added to the http mux layer: Authorization Once a request has been authenticated

which are assumed to provide a distributed, consistent key-value store. The default topology service plugin is etcd2. The topology service exists for several reasons: • It enables tablets to coordinate among their underlying MySQL instances. vtworker vtworker hosts long-running processes. It supports a plugin architecture and offers libraries so that you can easily choose tablets to use. Plugins are available are not supported. Authentication Plugins Vitess supports the mysql_native_password authentication plugin. Support for caching_sha2_password can be tracked in #5399. 44 Transport Security To configure

which are assumed to provide a distributed, consistent key-value store. The default topology service plugin is etcd2. The topology service exists for several reasons: • It enables tablets to coordinate among are not supported. Authentication Plugins Vitess supports the mysql_native_password authentication plugin. Support for caching_sha2_password can be tracked in #5399. Transport Security To configure VTGate implement the PushBackend interface of the stats package. For an example, you can see the OpenTSDB plugin. Once you’ve written the backend plug-in, you also need to register the plug-in from within all

which are assumed to provide a distributed, consistent key-value store. The default topology service plugin is etcd2. The topology service exists for several reasons: • It enables tablets to coordinate among are not supported. Authentication Plugins Vitess supports the mysql_native_password authentication plugin. Support for caching_sha2_password can be tracked in #5399. Transport Security To configure VTGate DATABASE queries out of the box. But, to make it possible to provision databases, a plugin mechanism exists. The plugin has to take care of creating and dropping the database, and update the topology & VSchema

which are assumed to provide a distributed, consistent key-value store. The default topology service plugin is etcd2. The topology service exists for several reasons: • It enables tablets to coordinate among their underlying MySQL instances. vtworker vtworker hosts long-running processes. It supports a plugin architecture and offers libraries so that you can easily choose tablets to use. Plugins are available are not supported. Authentication Plugins Vitess supports the mysql_native_password authentication plugin. Support for caching_sha2_password can be tracked in #5399. Transport Security To configure VTGate