From 90129b8d607c349ceb0b040303023b4d34cb1b8d Mon Sep 17 00:00:00 2001 From: Tim Stoop Date: Wed, 28 Feb 2018 21:17:46 +0100 Subject: [PATCH] Improve documentation regarding authentication. (#3903) I spend some time figuring out why my credentials weren't working, this small piece of information would have been very welcome. --- stable/mongodb-replicaset/Chart.yaml | 2 +- stable/mongodb-replicaset/README.md | 11 +++++++---- 2 files changed, 8 insertions(+), 5 deletions(-) diff --git a/stable/mongodb-replicaset/Chart.yaml b/stable/mongodb-replicaset/Chart.yaml index d8866e1ace..44ba6c3ef8 100644 --- a/stable/mongodb-replicaset/Chart.yaml +++ b/stable/mongodb-replicaset/Chart.yaml @@ -1,6 +1,6 @@ name: mongodb-replicaset home: https://github.com/mongodb/mongo -version: 2.3.0 +version: 2.3.1 appVersion: 3.6 description: NoSQL document-oriented database that stores JSON-like documents with dynamic schemas, simplifying the integration of data in content-driven applications. diff --git a/stable/mongodb-replicaset/README.md b/stable/mongodb-replicaset/README.md index 512c7a6b07..f44538319e 100644 --- a/stable/mongodb-replicaset/README.md +++ b/stable/mongodb-replicaset/README.md @@ -91,10 +91,13 @@ Once you have all 3 nodes in running, you can run the "test.sh" script in this d ## Authentication -By default, this chart creates a MongoDB replica set without authentication. Authentication can be enabled using the -parameter `auth.enabled`. Once enabled, keyfile access control is set up and an admin user with root privileges -is created. User credentials and keyfile may be specified directly. Alternatively, existing secrets may be provided. -The secret for the admin user must contain the keys `user` and `password`, that for the key file must contain `key.txt`. +By default, this chart creates a MongoDB replica set without authentication. Authentication can be +enabled using the parameter `auth.enabled`. Once enabled, keyfile access control is set up and an +admin user with root privileges is created. User credentials and keyfile may be specified directly. +Alternatively, existing secrets may be provided. The secret for the admin user must contain the +keys `user` and `password`, that for the key file must contain `key.txt`. The user is created with +full `root` permissions but is restricted to the `admin` database for security purposes. It can be +used to create additional users with more specific permissions. ## TLS support