Charmed Operator for MongoDB

Learn about configurations >

• ldap-query-template | string

  A RFC4516 formatted LDAP query URL template, which is used for authorization. It must contain either {USER} representing the authenticated user, or {PROVIDED_USER} representing the supplied username (before authentication or LDAP transformation). {PROVIDED_USER} should be used only if no value in the ldap-user-to-do-mapping config option is provided. If this configuration is not provided, a default string will be computed based on the base_dn returned by the GLAuth k8s charm. example: “dc=example,dc=com??sub?(&(objectClass=groupOfNames)(member={USER}))"

• ldap-user-to-dn-mapping | string

  A quote-enclosed JSON-string representing an ordered array of documents. Each document contains a regular expression match and either a substitution or ldapQuery template used for transforming the incoming username. Since the list is ordered, this order can be used to provide fine-grained tuning for building the right DN or the right ldapQuery for the user. example: '[{ match : "([^@]+)@([^@\.]+)\.example\.com", substitution: "CN={0},CN=Users,DC={1},DC=example,DC=com" }]'

• pause-after-unit-refresh | string

  Default: first

  Wait for manual confirmation to resume refresh after these units refresh

  Allowed values: "all", "first", "none"

• role | string

  Default: replication

  role config option exists to deploy the charmed-mongodb application as a shard, config-server, or as a replica set.

• system-users | secret

  Configure the internal system users and their passwords. The passwords will be auto-generated if this option is not set. It is for internal use only and SHOULD NOT be used by applications. This must be a Juju Secret URI pointing to a secret that contains a map with the following content: <username>: <password>. Possible users: charmed-backup, charmed-logrorate, charmed-stats, charmed-operator. This option is only compatible with replication and config-server roles.

• tls-client-private-key | secret

  A Juju secret URI of a secret containing the private key for client-to-server TLS certificates.

• tls-peer-private-key | secret

  A Juju secret URI of a secret containing the private key for peer-to-peer TLS certificates.