Enables Customer-Managed Encryption Keys (CMEK) on CockroachDB Cloud clusters with the Advanced plan and Advanced Security Add-on to give organizations control over data-at-rest encryption keys via their cloud provider's KMS. Use when enabling CMEK for compliance, rotating encryption keys, or verifying CMEK configuration.
Install
npx skills add cockroachdb/claude-plugin --skill enabling-cmek-encryptionnpx skills add cockroachdb/claude-plugin --skill enabling-cmek-encryption -a claude-code -gnpx skills add cockroachdb/claude-plugin --skill enabling-cmek-encryption -a codex -ggemini skills install https://github.com/cockroachdb/claude-plugin.git --path skills/cockroachdb-security-and-governance/enabling-cmek-encryptiongh skill install cockroachdb/claude-plugin enabling-cmek-encryptiongit clone --depth 1 https://github.com/cockroachdb/claude-plugin /tmp/cockroachdb__claude-plugin
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/cockroachdb__claude-plugin/skills/cockroachdb-security-and-governance/enabling-cmek-encryption ~/.claude/skills/enabling-cmek-encryption # Claude Code
cp -R /tmp/cockroachdb__claude-plugin/skills/cockroachdb-security-and-governance/enabling-cmek-encryption ~/.agents/skills/enabling-cmek-encryption # Codex, Cursor, Gemini CLI, Copilot, OpenCode