diff --git a/src/current/v24.3/security-reference/authentication.md b/src/current/v24.3/security-reference/authentication.md index 1fb1bbe8d6f..82638080061 100644 --- a/src/current/v24.3/security-reference/authentication.md +++ b/src/current/v24.3/security-reference/authentication.md @@ -122,3 +122,11 @@ CockroachDB {{ site.data.products.core }} deploys with the following default HBA local all all password ``` +### Access for SQL health monitoring + +CockroachDB {{ site.data.products.cloud }} uses a service user named `managed-sql-prober` that regularly runs `SELECT 1;` queries on the cluster to monitor and report issues with SQL availability. The default host-based authentication configurations allow this service user to run, but more restrictive HBA configurations may prevent SQL availability monitoring. To explicitly enable this service user to authenticate, add the following line to your HBA configuration: + +``` +# TYPE DATABASE USER ADDRESS METHOD + host all managed-sql-prober all cert +``` \ No newline at end of file diff --git a/src/current/v25.1/security-reference/authentication.md b/src/current/v25.1/security-reference/authentication.md index 1fb1bbe8d6f..82638080061 100644 --- a/src/current/v25.1/security-reference/authentication.md +++ b/src/current/v25.1/security-reference/authentication.md @@ -122,3 +122,11 @@ CockroachDB {{ site.data.products.core }} deploys with the following default HBA local all all password ``` +### Access for SQL health monitoring + +CockroachDB {{ site.data.products.cloud }} uses a service user named `managed-sql-prober` that regularly runs `SELECT 1;` queries on the cluster to monitor and report issues with SQL availability. The default host-based authentication configurations allow this service user to run, but more restrictive HBA configurations may prevent SQL availability monitoring. To explicitly enable this service user to authenticate, add the following line to your HBA configuration: + +``` +# TYPE DATABASE USER ADDRESS METHOD + host all managed-sql-prober all cert +``` \ No newline at end of file diff --git a/src/current/v25.2/security-reference/authentication.md b/src/current/v25.2/security-reference/authentication.md index 1fb1bbe8d6f..e24a83be0e4 100644 --- a/src/current/v25.2/security-reference/authentication.md +++ b/src/current/v25.2/security-reference/authentication.md @@ -122,3 +122,11 @@ CockroachDB {{ site.data.products.core }} deploys with the following default HBA local all all password ``` +### Access for SQL health monitoring + +CockroachDB {{ site.data.products.cloud }} uses a user named `managed-sql-prober` that regularly runs `SELECT 1;` queries on the cluster to monitor and report issues with SQL availability. The default host-based authentication configurations allow this service user to run, but more restrictive HBA configurations may prevent SQL availability monitoring. To explicitly enable this service user to authenticate, add the following line to your HBA configuration: + +``` +# TYPE DATABASE USER ADDRESS METHOD + host all managed-sql-prober all cert +``` \ No newline at end of file diff --git a/src/current/v25.3/security-reference/authentication.md b/src/current/v25.3/security-reference/authentication.md index 1fb1bbe8d6f..82638080061 100644 --- a/src/current/v25.3/security-reference/authentication.md +++ b/src/current/v25.3/security-reference/authentication.md @@ -122,3 +122,11 @@ CockroachDB {{ site.data.products.core }} deploys with the following default HBA local all all password ``` +### Access for SQL health monitoring + +CockroachDB {{ site.data.products.cloud }} uses a service user named `managed-sql-prober` that regularly runs `SELECT 1;` queries on the cluster to monitor and report issues with SQL availability. The default host-based authentication configurations allow this service user to run, but more restrictive HBA configurations may prevent SQL availability monitoring. To explicitly enable this service user to authenticate, add the following line to your HBA configuration: + +``` +# TYPE DATABASE USER ADDRESS METHOD + host all managed-sql-prober all cert +``` \ No newline at end of file diff --git a/src/current/v25.4/security-reference/authentication.md b/src/current/v25.4/security-reference/authentication.md index 1fb1bbe8d6f..82638080061 100644 --- a/src/current/v25.4/security-reference/authentication.md +++ b/src/current/v25.4/security-reference/authentication.md @@ -122,3 +122,11 @@ CockroachDB {{ site.data.products.core }} deploys with the following default HBA local all all password ``` +### Access for SQL health monitoring + +CockroachDB {{ site.data.products.cloud }} uses a service user named `managed-sql-prober` that regularly runs `SELECT 1;` queries on the cluster to monitor and report issues with SQL availability. The default host-based authentication configurations allow this service user to run, but more restrictive HBA configurations may prevent SQL availability monitoring. To explicitly enable this service user to authenticate, add the following line to your HBA configuration: + +``` +# TYPE DATABASE USER ADDRESS METHOD + host all managed-sql-prober all cert +``` \ No newline at end of file diff --git a/src/current/v26.1/security-reference/authentication.md b/src/current/v26.1/security-reference/authentication.md index 1fb1bbe8d6f..82638080061 100644 --- a/src/current/v26.1/security-reference/authentication.md +++ b/src/current/v26.1/security-reference/authentication.md @@ -122,3 +122,11 @@ CockroachDB {{ site.data.products.core }} deploys with the following default HBA local all all password ``` +### Access for SQL health monitoring + +CockroachDB {{ site.data.products.cloud }} uses a service user named `managed-sql-prober` that regularly runs `SELECT 1;` queries on the cluster to monitor and report issues with SQL availability. The default host-based authentication configurations allow this service user to run, but more restrictive HBA configurations may prevent SQL availability monitoring. To explicitly enable this service user to authenticate, add the following line to your HBA configuration: + +``` +# TYPE DATABASE USER ADDRESS METHOD + host all managed-sql-prober all cert +``` \ No newline at end of file