Company
Date Published
Author
Steven Hubbard
Word count
1024
Language
English
Hacker News points
None

Summary

The blog post outlines a method for companies using Azure to enable access to CockroachDB for approved users by dynamically mapping Azure Active Directory users to corresponding SQL users in CockroachDB. This is achieved using JSON Web Tokens (JWTs), the Azure CLI, and CockroachDB’s SQL client. The process involves setting up prerequisite resources, securely connecting to the database using certificates, and configuring CockroachDB with specific cluster settings, particularly in version 23.1.5 and later. The use of the "upn" key for dynamic user mapping is emphasized to facilitate multiple user connections. The post provides guidance on obtaining necessary JWTs, configuring cluster settings, and securely connecting to CockroachDB using SQL commands, while also highlighting the importance of avoiding insecure connections in production environments.