From cba0498e5e9421a5d605dcd46de88fe737c44b63 Mon Sep 17 00:00:00 2001
From: Suraj Rajan <surajkrajan95@gmail.com>
Date: Fri, 28 Aug 2026 21:29:05 +0530
Subject: [PATCH] Fix CockroachDB SCRAM iteration limit

---
 .../org/testcontainers/cockroachdb/CockroachContainer.java    | 4 ++++
 .../org/testcontainers/containers/CockroachContainer.java     | 4 ++++
 .../testcontainers/cockroachdb/CockroachContainerTest.java    | 1 +
 3 files changed, 9 insertions(+)

diff --git a/modules/cockroachdb/src/main/java/org/testcontainers/cockroachdb/CockroachContainer.java b/modules/cockroachdb/src/main/java/org/testcontainers/cockroachdb/CockroachContainer.java
index 0d49e8cdaf7..5176fda34d1 100644
--- a/modules/cockroachdb/src/main/java/org/testcontainers/cockroachdb/CockroachContainer.java
+++ b/modules/cockroachdb/src/main/java/org/testcontainers/cockroachdb/CockroachContainer.java
@@ -31,6 +31,9 @@ public class CockroachContainer extends JdbcDatabaseContainer<CockroachContainer
 
     private static final String TEST_QUERY_STRING = "SELECT 1";
 
+    // CockroachDB v22.2 uses 119,680 SCRAM iterations, above pgJDBC's default safety limit.
+    private static final String DEFAULT_SCRAM_MAX_ITERATIONS = "119680";
+
     private static final int REST_API_PORT = 8080;
 
     private static final int DB_PORT = 26257;
@@ -52,6 +55,7 @@ public CockroachContainer(final String dockerImageName) {
     public CockroachContainer(final DockerImageName dockerImageName) {
         super(dockerImageName);
         dockerImageName.assertCompatibleWith(DEFAULT_IMAGE_NAME);
+        withUrlParam("scramMaxIterations", DEFAULT_SCRAM_MAX_ITERATIONS);
         this.isVersionGreaterThanOrEqualTo221 = isVersionGreaterThanOrEqualTo221(dockerImageName);
 
         WaitAllStrategy waitStrategy = new WaitAllStrategy();
diff --git a/modules/cockroachdb/src/main/java/org/testcontainers/containers/CockroachContainer.java b/modules/cockroachdb/src/main/java/org/testcontainers/containers/CockroachContainer.java
index 461b0467767..1a88c3524d8 100644
--- a/modules/cockroachdb/src/main/java/org/testcontainers/containers/CockroachContainer.java
+++ b/modules/cockroachdb/src/main/java/org/testcontainers/containers/CockroachContainer.java
@@ -41,6 +41,9 @@ public class CockroachContainer extends JdbcDatabaseContainer<CockroachContainer
 
     private static final String TEST_QUERY_STRING = "SELECT 1";
 
+    // CockroachDB v22.2 uses 119,680 SCRAM iterations, above pgJDBC's default safety limit.
+    private static final String DEFAULT_SCRAM_MAX_ITERATIONS = "119680";
+
     private static final int REST_API_PORT = 8080;
 
     private static final int DB_PORT = 26257;
@@ -70,6 +73,7 @@ public CockroachContainer(final String dockerImageName) {
     public CockroachContainer(final DockerImageName dockerImageName) {
         super(dockerImageName);
         dockerImageName.assertCompatibleWith(DEFAULT_IMAGE_NAME);
+        withUrlParam("scramMaxIterations", DEFAULT_SCRAM_MAX_ITERATIONS);
         this.isVersionGreaterThanOrEqualTo221 = isVersionGreaterThanOrEqualTo221(dockerImageName);
 
         WaitAllStrategy waitStrategy = new WaitAllStrategy();
diff --git a/modules/cockroachdb/src/test/java/org/testcontainers/cockroachdb/CockroachContainerTest.java b/modules/cockroachdb/src/test/java/org/testcontainers/cockroachdb/CockroachContainerTest.java
index 2f4710eae35..9720b2af1e4 100644
--- a/modules/cockroachdb/src/test/java/org/testcontainers/cockroachdb/CockroachContainerTest.java
+++ b/modules/cockroachdb/src/test/java/org/testcontainers/cockroachdb/CockroachContainerTest.java
@@ -60,6 +60,7 @@ void testWithAdditionalUrlParamInJdbcUrl() {
             assertThat(jdbcUrl)
                 .contains("?")
                 .contains("&")
+                .contains("scramMaxIterations=119680")
                 .contains("sslmode=disable")
                 .contains("application_name=cockroach");
         } finally {