Como implementar o MongoDB Atlas com o Atlas Kubernetes Operator

1
kubectl apply -f https://raw.githubusercontent.com/mongodb/mongodb-atlas-kubernetes/v2.3.1/deploy/all-in-one.yaml

1
kubectl create secret generic mongodb-atlas-operator-api-key \
2
    --from-literal="orgId=<atlas_organization_id>" \
3
    --from-literal="publicApiKey=<atlas_api_public_key>" \
4
    --from-literal="privateApiKey=<atlas_api_private_key>" \
5
    -n mongodb-atlas-system

1
kubectl label secret mongodb-atlas-operator-api-key atlas.mongodb.com/type=credentials -n mongodb-atlas-system

1
cat <<EOF | kubectl apply -f -
2
apiVersion: atlas.mongodb.com/v1
3
kind: AtlasProject
4
metadata:
5
  name: my-project
6
spec:
7
  name: Test Atlas Operator Project
8
  projectIpAccessList:
9
    - cidrBlock: "0.0.0.0/0"
10
      comment: "Allowing access to database from everywhere (only for Demo!)"
11
EOF

1
cat <<EOF | kubectl apply -f -
2
apiVersion: atlas.mongodb.com/v1
3
kind: AtlasDeployment
4
metadata:
5
  name: my-test-cluster
6
spec:
7
  projectRef:
8
    name: my-project
9
  deploymentSpec:
10
    clusterType: REPLICASET
11
    name: test-atlas-operator-project
12
    replicationSpecs:
13
       - regionConfigs:
14
         - regionName: US_EAST_1
15
           providerName: TENANT
16
           backingProviderName: AWS
17
           electableSpecs:
18
              instanceSize: M0
19
              nodeCount: 3
20
EOF

1
kubectl create secret generic the-user-password --from-literal="password=P@@sword%"

1
kubectl label secret the-user-password atlas.mongodb.com/type=credentials

1
cat <<EOF | kubectl apply -f -
2
apiVersion: atlas.mongodb.com/v1
3
kind: AtlasDatabaseUser
4
metadata:
5
  name: my-database-user
6
spec:
7
  roles:
8
    - roleName: "readWriteAnyDatabase"
9
      databaseName: "admin"
10
  projectRef:
11
    name: my-project
12
  username: theuser
13
  passwordSecretRef:
14
    name: the-user-password
15
EOF

1
kubectl get atlasdatabaseusers my-database-user -o=jsonpath='{.status.conditions[?(@.type=="Ready")].status}'

1
kubectl get secret {my-project}-{my-atlas-cluster}-{my-database-user} -o json | jq -r '.data | with_entries(.value |= @base64d)';

1
{
2
   "connectionStringStandard": "mongodb://theuser:P%40%40sword%25@test-cluster-shard-00-00.peqtm.mongodb.net:27017,test-cluster-shard-00-01.peqtm.mongodb.net:27017,test-cluster-shard-00-02.peqtm.mongodb.net:27017/?ssl=true&authSource=admin&replicaSet=atlas-pk82fl-shard-0",
3
   "connectionStringStandardSrv": "mongodb+srv://theuser:P%40%40sword%25@test-cluster.peqtm.mongodb.net",
4
   "password": "P@@sword%",
5
   "username": "theuser"
6
 }

1
containers:
2
 - name: test-app
3
   env:
4
    - name: "CONNECTION_STRING"
5
      valueFrom:
6
        secretKeyRef:
7
          name: test-atlas-operator-project-test-cluster-theuser
8
          key: connectionStringStandardSrv