This is the documentation for Vitess v21.0, an older release. See the v24.0 documentation for the latest release.
User Management and Authentication
Vitess uses its own mechanism for managing users and their permissions through
VTGate. As a result, the CREATE USER.... and
GRANT... statements will not work if sent through VTGate.
Authentication #
The Vitess VTGate component takes care of authentication for requests so we will need to add any users that should have access to the Keyspaces via the command-line options to VTGate.
VTGate supports multiple types of authentication:
- none - No authentication is performed. This is the default.
- static - File-based authentication
- ldap - LDAP-based authentication
- clientcert - TLS client certificate-based authentication
- vault - Vault-based authentication
User Management and Authentication