Infrastructure
Databases, cache and search
MySQL, Valkey and OpenSearch — creating them, attaching them, connecting to them, and deleting them safely.
Magento needs all three. The Deploy button stays disabled until each is attached.
They belong to the team, not to one environment, and are managed under Resources or inline from an environment's Overview.
Databases
A cluster is a MySQL server. Inside it are one or more logical databases, each with its own user and password.
Creating a cluster asks for its name, the name of the first database, the MySQL version — 8.0 or 8.4 — and the server size. The engine is always MySQL; MariaDB is not supported.
Add further databases to an existing cluster from the Resources page. Each gets a generated user granted rights to that database only, so two stores on one cluster cannot read each other.
Cache
Valkey 8 — a Redis fork, and what Magento talks to. One cache server carries three separate Redis databases:
| Database | Used for |
|---|---|
| 0 | Magento's default cache |
| 1 | Full page cache |
| 2 | Sessions |
Session locking is disabled deliberately: it is a common source of stalled checkouts under load in Magento 2.
Search
OpenSearch 2, single-node, indices prefixed magento2. Magento 2.4 will not install without a search engine.
Attaching and detaching
Attaching stages the change. The store keeps using the old resource until the next deploy — that is what makes a database switch safe, and it is how restores work.
When a deploy finishes, the newest attachment of each type wins and older ones are detached. Detaching never deletes data.
Neither attaching nor detaching is possible during a deploy.
Connecting to your database
Open the credentials dialog from the database on the Resources page. The password is fetched only when you open it, so it is not sitting in the page source.
By default the database is only reachable inside your private network, so connect through your application server:
ssh -L 3306:10.0.1.5:3306 nautvia@203.0.113.10
Then point your client at 127.0.0.1:3306. Your SSH keys are installed on application servers only — see Teams.
The public endpoint
A cluster can be opened to the internet with Public endpoint. It adds a firewall rule allowing port 3306 from anywhere.
Password is then the only thing protecting your shoppers' data. No IP allowlist, no VPN. Turn it on for a migration or a one-off analysis, and turn it back off. If you need permanent external access, use the SSH tunnel instead.
Deleting
Deletion is refused while something depends on it, and the message says what:
- a logical database attached to any environment, or serving as an environment's live database, cannot be deleted;
- a cluster with any such database cannot be deleted;
- a cache or search cluster attached anywhere cannot be deleted.
Detach first, deploy so the environment stops using it, then delete. Deleting a logical database also deletes its backups. Deleting a cluster destroys the server and everything on it.