The Patroni REST API is the management interface used to control Patroni, an orchestration layer for PostgreSQL high availability. Operators use it to check cluster health, view leader and replica status, and trigger actions such as failover or switchover. It is meant for administration, not for ordinary application traffic.
In cyber security, this matters because a management API can become a direct attack surface if it is exposed on the network, poorly authenticated, or trusted too broadly inside a cluster. An attacker who reaches it may be able to influence database failover behavior, change cluster state, or abuse it as a command path in vulnerable deployments. Defenders should treat the Patroni REST API as part of the control plane: restrict access to trusted hosts, enforce authentication and network segmentation, and keep Patroni and dependent platforms patched.