MySQL Group Replication

Read references/configuration.md before changing desired state or running a lifecycle command.

Safety

• Keep secrets out of colors.yml; use ignored COLORS_PAR_* exports.
• Never set COLORS_PAR_PROFILE and never edit generated .colors/ files.
• Default to build and create --dry-run; a real create or delete needs explicit authorization.
• Keep compute-prevent-destroy: true. Lift it for one authorized delete with COLORS_PAR_COMPUTE_PREVENT_DESTROY=false.
• Restrict mysql-ssh-sources and mysql-client-sources; do not use 0.0.0.0/0. The MySQL port is a public port.
• The design needs exactly two database credentials. Do not introduce a third.

Commands