TiDB provider now encrypts all cluster traffic with provider-issued certificates

•
tidb security releases

The TiDB provider now has cert-manager issue the TLS certificates for the cluster and encrypts TiDB traffic with those provider-issued certificates, so no component talks in plaintext.

BR backup and restore jobs also run as a provider-managed account instead of a default identity, tightening what those jobs can touch.

Encrypted TiDB traffic is available in provider-tidb 0.2.0. To learn more, see the release notes.

Read the docs
Back to What's New