managing-certificates-and-encryption
Manages TLS certificate and encryption key lifecycle across all tiers. Self-Hosted covers certificate expiry monitoring, node/CA/client cert rotation, and Kubernetes cert management. Advanced/BYOC covers managed TLS (no action) and CMEK (Customer-Managed Encryption Key) rotation in your KMS. Standard and Basic have fully managed TLS and encryption with no customer action. CMEK is only available on Advanced. Use when monitoring cert health, performing rotation, managing CMEK, or responding to key compromise.
- Version
- 2.0
- Compatibility
- Self-Hosted requires SQL admin access and filesystem access for cert rotation. Advanced/BYOC requires Cloud Console for CMEK management. Standard and Basic certificates and encryption are fully managed.
Pinned to revision 4e8964e24a5a, so it is the text this page describes rather than whatever the author pushed since.
Files
- skills/managing-certificates-and-encryption/SKILL.md
- skills/managing-certificates-and-encryption/cockroachdb-operations-and-lifecycle/managing-cluster-settings/SKILL.md
- skills/managing-certificates-and-encryption/cockroachdb-operations-and-lifecycle/reviewing-cluster-health/SKILL.md
- skills/managing-certificates-and-encryption/references/cmek-procedures.md
- skills/managing-certificates-and-encryption/references/kubernetes-certs.md
- skills/managing-certificates-and-encryption/references/rotation-procedures.md
- skills/managing-certificates-and-encryption/references/safety-guide.md
Every link opens the file at its source, pinned to the revision this page describes.