# Percona K8S Operator MySQL enforce encrypted user connection

**URL:** <https://forums.percona.com/t/percona-k8s-operator-mysql-enforce-encrypted-user-connection/9992>\
**Category:** Percona Operator for MySQL\
**Created:** [April 7, 2021, 10:19am UTC](https://forums.percona.com/t/percona-k8s-operator-mysql-enforce-encrypted-user-connection/9992 "2021-04-07T10:19:49Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![GedasTSB](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/gedastsb/32/3285_2.png) [@GedasTSB](https://forums.percona.com/u/GedasTSB)\
**Post date:** [April 7, 2021, 10:19am UTC](https://forums.percona.com/t/percona-k8s-operator-mysql-enforce-encrypted-user-connection/9992/1 "2021-04-07T10:19:49Z")

</div>

Hello,  
Does Percona K8S Operator XtraDB (MySQL) support encrypted user connections?  
From 5.7 in MySQL, we can enforce encrypted connection - [MySQL :: MySQL 5.7 Reference Manual :: 6.3.1 Configuring MySQL to Use Encrypted Connections](https://dev.mysql.com/doc/refman/5.7/en/using-encrypted-connections.html)

I tried to add  
[mysqld]  
require\_secure\_transport=ON

configuration parameter, but I get errors in Percona Operator.

Searcing for the answer is possible to enforce encrypted connection only or not when we are using Percona K8S Operator for MySQL?

Attaching the [Percona\_operator\_logs.log](https://forums.percona.com/uploads/short-url/lUH3Xnvnr5PouScNIKppDiwx3h7.log) (63.5 KB)

---

<div class="post-metadata">

**Author:** ![Sergey\_Pronin](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/sergey_pronin/32/14887_2.png) [@Sergey\_Pronin](https://forums.percona.com/u/Sergey_Pronin)\
**Post date:** [April 9, 2021, 12:34pm UTC](https://forums.percona.com/t/percona-k8s-operator-mysql-enforce-encrypted-user-connection/9992/2 "2021-04-09T12:34:41Z")

</div>

Hello @GedasTSB ,

1. I don’t see anything in the logs which points out that the config is wrong. The errors in the log point out that you have manually changed the statefull set. Is it right?
2. I have added the following config under spec.pxc in cr.yaml:

```auto
configuration: |
[mysqld]
require_secure_transport=ON

```

The cluster is up and running.  
Could you let me know how you add the corresponding configuration?