configuring-ip-allowlists

Official

Harden CockroachDB Cloud IP allowlists quickly.

Authorcockroachdb
Version1.0.0
Installs0

System Documentation

What problem does it solve?

Configures and hardens IP allowlists on CockroachDB Cloud clusters to restrict SQL and DB Console access to only authorized CIDR ranges. It identifies overly permissive entries such as 0.0.0.0/0 and replaces them with specific, narrow ranges to prevent unintended exposure.

Core Features & Use Cases

  • Identify and remove overly broad IP allowlist entries (e.g., 0.0.0.0/0).
  • Add precise CIDR ranges for office networks, VPNs, and CI/CD runners, with optional naming for auditing.
  • Provide safe rollback guidance and align with private connectivity as an alternative to allowlists.

Quick Start

Add specific CIDR entries for trusted sources and remove 0.0.0.0/0 after validating access.

Dependency Matrix

Required Modules

None required

Components

references

💻 Claude Code Installation

Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.

Please help me install this Skill:
Name: configuring-ip-allowlists
Download link: https://github.com/cockroachdb/claude-plugin/archive/main.zip#configuring-ip-allowlists

Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
View Source Repository

Agent Skills Search Helper

Install a tiny helper to your Agent, search and equip skill from 471,000+ vetted skills library on demand.