1. Database Credentials & URI Parser
RFC 3986 Enginepostgresql://auth_app:My@Password123@10.128.0.3:5432/auth_db
Syntax Ambiguity Detected:
Unescaped '@' at password index 2 causes URI parser to misidentify 'Password123@10.128.0.3' as hostname.
2. Architecture Topology & Diagnostics
Live GKE Simulator
Subnet: 10.128.0.0/20
Private Service Access Enabled (Same VPC)
Source Rule Highlight (RFC 3986 ยง2.2):
When connection strings contain URI reserved delimiters such as @, :, /, or # within credentials, parsers like psycopg divide parameters at the delimiter.
The character @ separates userinfo from the authority/host. Thus Password123@10.128.0.3 triggers
psycopg.OperationalError: failed to resolve host : [Errno -2] Name or service not known. Fix by encoding @ as %40.