CockroachDB Cloud IP allowlists, private endpoints, egress policy, metric and log export, and physical cluster replication. Generated from Cockroach Labs' hash-locked 2024-09-16 OpenAPI snapshot and carries 43 of 139 current operations. The enrolled cockroachdb-cloud connection supplies a service-account secret through connection-owned Bearer authentication at cockroachlabs.cloud. Every /api/v1 request fixes Cc-Version to 2024-09-16; SCIM v2 requests deliberately omit that v1-only header. Required JSON bodies are sent verbatim, parsed JSON preserves unsafe integers as exact strings, reads are uncached, every mutation requires approval, and no task, note, or user-work project Source is invented for cloud infrastructure or identity administration.
What this pack installs
- cockroachdb-cloud-networking-observability Ingredient
Trust & control
What installing this whole pack would let it do. Recued grants these permissions at install — review them there before approving.
What it's allowed to do
Destructive
Web APIs
cockroachdb-cloud-networking-observability
external change
Read: log_export.get_log_export_info · No approvalAdmin: log_export.enable_log_export · Always asksDestructive: log_export.delete_log_export · Always asksRead: metric_export.get_cloud_watch_metric_export_info · No approvalAdmin: metric_export.enable_cloud_watch_metric_export · Always asksDestructive: metric_export.delete_cloud_watch_metric_export · Always asksRead: metric_export.get_datadog_metric_export_info · No approvalAdmin: metric_export.enable_datadog_metric_export · Always asksDestructive: metric_export.delete_datadog_metric_export · Always asksRead: metric_export.get_prometheus_metric_export_info · No approvalAdmin: metric_export.enable_prometheus_metric_export · Always asksDestructive: metric_export.delete_prometheus_metric_export · Always asksRead: ip_allowlists.list_allowlist_entries · No approvalAdmin: ip_allowlists.add_allowlist_entry · Always asksDestructive: ip_allowlists.add_allowlist_entry2 · Always asksDestructive: ip_allowlists.update_allowlist_entry · Always asksDestructive: ip_allowlists.delete_allowlist_entry · Always asksRead: private_endpoint_services.list_aws_endpoint_connections · No approvalDestructive: private_endpoint_services.set_aws_endpoint_connection_state · Always asksRead: egress_private_endpoints.list_egress_private_endpoints · No approvalAdmin: egress_private_endpoints.create_egress_private_endpoint · Always asksRead: egress_private_endpoints.get_egress_private_endpoint · No approvalDestructive: egress_private_endpoints.update_egress_private_endpoint · Always asksDestructive: egress_private_endpoints.delete_egress_private_endpoint · Always asksRead: egress_rules.list_egress_rules · No approvalAdmin: egress_rules.add_egress_rule · Always asksAdmin: egress_rules.set_egress_traffic_policy · Always asksRead: egress_rules.get_egress_rule · No approvalDestructive: egress_rules.edit_egress_rule · Always asksDestructive: egress_rules.delete_egress_rule · Always asksRead: private_endpoint_services.list_private_endpoint_connections · No approvalAdmin: private_endpoint_services.add_private_endpoint_connection · Always asksDestructive: private_endpoint_services.delete_private_endpoint_connection · Always asksRead: private_endpoint_services.list_private_endpoint_services · No approvalAdmin: private_endpoint_services.create_private_endpoint_services · Always asksRead: private_endpoint_services.list_private_endpoint_trusted_owners · No approvalAdmin: private_endpoint_services.add_private_endpoint_trusted_owner · Always asksRead: private_endpoint_services.get_private_endpoint_trusted_owner · No approvalDestructive: private_endpoint_services.remove_private_endpoint_trusted_owner · Always asksRead: physical_cluster_replication.list_physical_replication_streams · No approvalAdmin: physical_cluster_replication.create_physical_replication_stream · Always asksRead: physical_cluster_replication.get_physical_replication_stream · No approvalDestructive: physical_cluster_replication.update_physical_replication_stream · Always asks
Data it touches
SurfacesWeb APIs
Tags
pack:cockroachdb-cloudcockroachdbmanaged-databasenetworkingprivate-endpointsegressmetricsreplicationapicomposition