Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Consider MySQL backend for events #5859

Closed
klizhentas opened this issue Mar 4, 2021 · 2 comments
Closed

Consider MySQL backend for events #5859

klizhentas opened this issue Mar 4, 2021 · 2 comments
Labels
feature-request Used for new features in Teleport, improvements to current should be #enhancements

Comments

@klizhentas
Copy link
Contributor

What

Consider MySQL backend for events. Related to problems expressed in #5435 and #5858

MySQL drivers for backend will allow us to try AWS Aurora or PingCAP TiDB multicloud version

@klizhentas klizhentas added the feature-request Used for new features in Teleport, improvements to current should be #enhancements label Mar 4, 2021
@klizhentas
Copy link
Contributor Author

cc @russjones @knisbet @xacrimon

@knisbet
Copy link
Contributor

knisbet commented Mar 8, 2021

Note: we also might want to consider an API/plugin based approach if we want to use a shared database in the cloud. IE, bootstrap an API infront of the underlying DB that is based on mTLS and does all enforcement and audit of a tenant is only able to reach their own data via a limited set of API calls (gRPC/mTLS for example) that bridges to the SQL database and does all enforcement of data.

IIRC, mysql had some security issues a couple years ago where mysql client by design could do some arbitrary processing server side (I think it was writing a temp file or something weird like that to the server). Not just that though, supporting SQL as a protocol and using database RBAC may have some surface area concerns in the security model.

@zmb3 zmb3 closed this as not planned Won't fix, can't repro, duplicate, stale Jan 15, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
feature-request Used for new features in Teleport, improvements to current should be #enhancements
Projects
None yet
Development

No branches or pull requests

3 participants