SCRAM 인증을 사용하여 데이터베이스 사용자 관리

kubectl config set-context $(kubectl config current-context) --namespace=<metadata.namespace>

1
---
2
apiVersion: v1
3
kind: Secret
4
metadata:
5
  name: <mms-user-1-password>
6
  # corresponds to user.spec.passwordSecretKeyRef.name
7
type: Opaque
8
stringData:
9
  password: <my-plain-text-password>
10
  # corresponds to user.spec.passwordSecretKeyRef.key
11
...

1
---
2
apiVersion: v1
3
kind: Secret
4
metadata:
5
  name: <mms-user-1-password>
6
  # corresponds to user.spec.passwordSecretKeyRef.name
7
type: Opaque
8
data:
9
  password: <base-64-encoded-password>
10
  # corresponds to user.spec.passwordSecretKeyRef.key
11
...

---
apiVersion: mongodb.com/v1
kind: MongoDBUser
metadata:
  name: <mms-scram-user-1>
spec:
  passwordSecretKeyRef:
    name: <mms-user-1-password>
    # Match to metadata.name of the User Secret
    key: password
  username: "<mms-scram-user-1>"
  db: "admin" #
  mongodbResourceRef:
    name: "<my-replica-set>"
    # Match to MongoDB resource using authenticaiton
  roles:
    - db: "admin"
      name: "clusterAdmin"
    - db: "admin"
      name: "userAdminAnyDatabase"
    - db: "admin"
      name: "readWrite"
    - db: "admin"
      name: "userAdminAnyDatabase"
...

kubectl apply -f <database-user-conf>.yaml