Before you start
- Review upstream license eligibility and registration
- Provide CA, node certificate and key; certificate SAN must include main and localhost
- Use a client certificate to initialize SQL users; admin HTTP is loopback only
- Single node is not highly available
Configuration that needs your attention
Provide a CA, node certificate and matching private key. The node certificate needs the node principal, main and localhost names, and server/client authentication.
Create SQL users with a separate client certificate. The administration HTTP endpoint is loopback only.
A secure single node is not a highly available cluster. Upstream license eligibility and registration still apply.
Required secrets
Configure these scoped secrets during deployment review in your Hakopod installation. Secret values stay out of the application TOML.
-
database-ca -
database-node-cert -
database-node-key
Use this preset
- Open the Catalog in your own Hakopod dashboard and select CockroachDB.
- Choose the project, environment, and application name. Set the required values and secret references.
- Review the generated configuration, resource requests, networking, and storage plan.
- Deploy, then inspect readiness and logs. Configure backups for persistent data before relying on the service.
Read the upstream setup documentation ↗
View native TOML and setup notes ↗
Pinned container image
docker.io/cockroachdb/cockroach:v25.4.16@sha256:d505f1e479cd4a4305acdfa3abf435298469058d6745cf5dde56b0a239da22fa
The catalog pins this image for reproducibility. Review upstream updates and compatibility before changing it.