Set tenant whitelist groups

Background information

• In OceanBase, you can add whitelist groups to tenants to specify which IP addresses can access them.

• Tenants automatically inherit the whitelist groups of their cluster. Whitelist groups marked with an (inherited instance) label cannot be edited or deleted. They are always synchronized with the cluster instance whitelist.

• You can add up to 10 whitelist groups. Group names must be unique, and groups cannot be empty. Each whitelist group can contain up to 40 IP addresses.

Procedure

1. Log on to the OceanBase Management Console .

2. In the left navigation pane, click Instance List.

3. In the instance list, click the name of the target cluster instance to go to the Cluster Instance Workbench.

4. In the left navigation pane, click Tenant Management. On the page that opens, click the target tenant to open the Tenant Workbench page.

5. In the left navigation pane, click Security Settings.

6. On the Security Settings page, go to the Whitelist tab and click Add Whitelist Group.

   Note

   • Whitelists apply to both classic networks and virtual private clouds (VPCs). They are a common network isolation pattern.

   • Whitelist groups marked with an (inherited instance) label are inherited from the cluster instance. They are always synchronized with the cluster instance whitelist.

7. You can enter a Group Name and an IP Address.

   Parameter	Description
   Group Name	The group name must start with a lowercase letter and end with a lowercase letter or a digit. It can only contain lowercase letters, digits, and underscores (_). The name must be 2 to 32 characters long.
   IP Address	Enter an IP address, such as 192.168.0.1, or an IP address range, such as 192.168.0.0/24. Separate multiple IP addresses with commas, such as 192.168.0.1,192.168.0.0/24. 127.0.0.1 denies access from any IP address. 0.0.0.0 allows unrestricted access from all IP addresses. Changes to the cluster instance whitelist affect all tenants. You can set a maximum of 40 whitelists.

8. Click OK to add the whitelist group.

9. After you add the whitelist group, you can click the edit icon next to the group to add or delete IP addresses. To delete the entire whitelist group, click the delete icon.

   Note

   You cannot edit or delete whitelist groups marked with an (inherited instance) label.