# CockroachDB Plans Native X.509 SAN Support for SPIFFE and SPIRE Integration

DevFeed: [CockroachDB Plans Native X.509 SAN Support for SPIFFE and SPIRE Integration](<https://devfeed.tech/articles/modernizing-database-authentication-cockroachdb-embraces-zero-trust-with-spiffe-and-spire-support-23827.md>)

Original publisher: [Read original article](<https://cockroachlabs.com/blog/zero-trust-database-authentication-spiffe-spire>)

Author: Sanchit Khanna,Biplav Saraf

Published: 2026-03-13T00:00:00Z

Content type: article

Language: en

Sources: [Cockroach Labs](<https://devfeed.tech/sources/cockroach-labs.md>)

Topics: [CockroachDB](<https://devfeed.tech/topics/cockroachdb.md>), [Databases](<https://devfeed.tech/topics/databases.md>), [SPIFFE](<https://devfeed.tech/topics/spiffe.md>), [SPIRE](<https://devfeed.tech/topics/spire.md>), [certificates](<https://devfeed.tech/topics/certificates.md>), [Zero Trust](<https://devfeed.tech/topics/zero-trust.md>), [Security](<https://devfeed.tech/topics/security.md>), [Microservice](<https://devfeed.tech/topics/microservice.md>)

Tags: [architectures](<https://devfeed.tech/tags/architectures.md>), [auditability](<https://devfeed.tech/tags/auditability.md>), [aws-iam](<https://devfeed.tech/tags/aws-iam.md>), [certificates](<https://devfeed.tech/tags/certificates.md>), [cockroachdb](<https://devfeed.tech/tags/cockroachdb.md>), [compliance](<https://devfeed.tech/tags/compliance.md>), [cryptographic](<https://devfeed.tech/tags/cryptographic.md>), [database](<https://devfeed.tech/tags/database.md>), [distributed](<https://devfeed.tech/tags/distributed.md>), [processor](<https://devfeed.tech/tags/processor.md>), [regex](<https://devfeed.tech/tags/regex.md>), [security](<https://devfeed.tech/tags/security.md>), [soc](<https://devfeed.tech/tags/soc.md>), [soc-2](<https://devfeed.tech/tags/soc-2.md>), [spiffe](<https://devfeed.tech/tags/spiffe.md>), [spire](<https://devfeed.tech/tags/spire.md>), [standards](<https://devfeed.tech/tags/standards.md>), [teams](<https://devfeed.tech/tags/teams.md>), [verification](<https://devfeed.tech/tags/verification.md>), [zero-trust](<https://devfeed.tech/tags/zero-trust.md>)

## AI overview

The article previews planned CockroachDB authentication support for Subject Alternative Name fields in X.509 certificates. It explains how SAN support is intended to enable integration with SPIFFE and SPIRE and support regex-based identity mapping for cloud-native workloads.

## Source excerpt

In the evolution of cloud-native security, identity has become the new perimeter.