How to dynamically map Azure managed identities to CockroachDB SQL users
Blog post from Cockroach Labs
The blog post outlines a method for companies using Azure to enable access to CockroachDB for approved users by dynamically mapping Azure Active Directory users to corresponding SQL users in CockroachDB. This is achieved using JSON Web Tokens (JWTs), the Azure CLI, and CockroachDB’s SQL client. The process involves setting up prerequisite resources, securely connecting to the database using certificates, and configuring CockroachDB with specific cluster settings, particularly in version 23.1.5 and later. The use of the "upn" key for dynamic user mapping is emphasized to facilitate multiple user connections. The post provides guidance on obtaining necessary JWTs, configuring cluster settings, and securely connecting to CockroachDB using SQL commands, while also highlighting the importance of avoiding insecure connections in production environments.