vitess icon indicating copy to clipboard operation
vitess copied to clipboard

Feature Request: Append CallerID to all VTGate Queries (from HubSpot)

Open corbantek opened this issue 3 months ago • 3 comments

Feature Description

At HubSpot we have an internal feature that allows us to enable "caller id" on vtgate queries.

Essentially when a query passes through the vtgate, if --append-caller-id-to-queries is enabled, the vtgate executor will automatically append a sql query comment of the caller ID (username) to the end of the query.

Use Case(s)

This use case is relevant to HubSpot as we use this for auditing who/what ran queries on our tablets (through the vtgates). Its pretty essentially for our compliance

PR

Here is the PR for more clarity, simple change: Implement appendCallerID feature in vtgate executor

corbantek avatar Sep 09 '25 18:09 corbantek

+1 We would like something like this as well. The obfuscation layers where at the MySQL process we can only see the vttablet user leads to some interesting forensic work.

Susurrus19 avatar Sep 17 '25 21:09 Susurrus19

+1 We would like something like this as well. The obfuscation layers where at the MySQL process we can only see the vttablet user leads to some interesting forensic work.

I also have a follow up for this that also appends the IP Address and group used (if acl is enabled)

corbantek avatar Sep 18 '25 14:09 corbantek

+1 - not sure the best way of upvoting this.

sam-k3nny avatar Sep 25 '25 21:09 sam-k3nny