[Scheduled Maintenance] Database Security Hardening & Zero-Trust mTLS Migration
Resolved
Sep 13, 2026 at 5:00pm UTC
Maintenance ended
Affected services
Database
API
Redis
Created
Sep 12, 2026 at 11:00am UTC
Summary: Migrating database access from static passwords to zero-trust mTLS client certificate authentication (Vault PKI) and enforcing multi-tenant privilege boundaries.
Scope: MariaDB cluster, backend API services, and CI/CD migration runners.
Impact:
* Brief intermittent connection drops (~5–10 min) during rolling restarts.
* Permanent deprecation of static database passwords and remote TCP root access.
* DB engine will reject direct DELETE queries (soft-delete enforcement).
Action Required: None for end-users; internal services will automatically transition to ephemeral X.509 certificates.
Affected services
Database
API
Redis