Charmed Operator for MongoDB

Learn about configurations >

• enable-encryption-at-rest | boolean

  This variable enables encryption at rest for MongoDB. It must be set at deploy time, as it cannot be set after MongoDB has started. When enabling encryption at rest, you must integrate MongoDB with Vault-k8s Charm.

• ldap-query-template | string

  A RFC4516 formatted LDAP query URL template, which is used for authorization. It must contain either {USER} representing the authenticated user, or {PROVIDED_USER} representing the supplied username (before authentication or LDAP transformation). {PROVIDED_USER} should be used only if no value in the ldap-user-to-do-mapping config option is provided. If this configuration is not provided, a default string will be computed based on the base_dn returned by the GLAuth k8s charm. example: “dc=example,dc=com??sub?(&(objectClass=groupOfNames)(member={USER}))"

• ldap-user-to-dn-mapping | string

  A quote-enclosed JSON-string representing an ordered array of documents. Each document contains a regular expression match and either a substitution or ldapQuery template used for transforming the incoming username. Since the list is ordered, this order can be used to provide fine-grained tuning for building the right DN or the right ldapQuery for the user. example: '[{ match : "([^@]+)@([^@\.]+)\.example\.com", substitution: "CN={0},CN=Users,DC={1},DC=example,DC=com" }]'

• pause-after-unit-refresh | string

  Default: first

  Wait for manual confirmation to resume refresh after these units refresh

  Allowed values: "all", "first", "none"

• role | string

  Default: replication

  role config option exists to deploy the charmed-mongodb application as a shard, config-server, or as a replica set.

• system-users | secret

  Configure the internal system users and their passwords. The passwords will be auto-generated if this option is not set. It is for internal use only and SHOULD NOT be used by applications. This must be a Juju Secret URI pointing to a secret that contains a map with the following content: <username>: <password>. Possible users: charmed-backup, charmed-logrorate, charmed-stats, charmed-operator. This option is only compatible with replication and config-server roles.

• tls-client-private-key | secret

  A Juju secret URI of a secret containing the private key for client-to-server TLS certificates.

• tls-peer-private-key | secret

  A Juju secret URI of a secret containing the private key for peer-to-peer TLS certificates.