Database Access
Database Guide

MySQL Access

Secure MySQL access with certificate authentication, dynamic credentials, and complete query auditing.

Estimated time: 10 minutes

Setup Steps

1

Register MySQL Database

Add your MySQL database to TigerAccess.

tacctl create -f - <<EOF
kind: db
metadata:
  name: prod-mysql
  labels:
    env: production
    engine: mysql
spec:
  protocol: mysql
  uri: mysql.internal:3306
  admin_user:
    name: tigeraccess-admin
EOF
2

Configure Database Users

Set up database users and permissions.

-- Create TigerAccess admin user
CREATE USER 'tigeraccess-admin'@'%' IDENTIFIED BY 'password';
GRANT CREATE USER, GRANT OPTION ON *.* TO 'tigeraccess-admin'@'%';

-- Or configure specific users
tacctl db users add prod-mysql \
  --name=readonly \
  --permissions=SELECT
3

Connect to MySQL

Access MySQL through TigerAccess.

# Connect via tac CLI
tac db connect prod-mysql

# Connect with specific user
tac db connect prod-mysql --db-user=readonly --db-name=mydb

# Use with native mysql client
tac proxy db prod-mysql -p 3307 &
mysql -h 127.0.0.1 -P 3307 -u readonly mydb

MySQL Access Configured

Your MySQL database is now accessible through TigerAccess with certificate authentication, dynamic credentials, and complete audit logging.