SD-Core Control Plane

Learn about configurations >

• ldap-query-template | string

  A RFC4516 formatted LDAP query URL template, which is used for authorization. It must contain either `{USER}` representing the authenticated user, or `{PROVIDED_USER}` representing the supplied username (before authentication or LDAP transformation). `{PROVIDED_USER}` should be used only if no value in the `ldap-user-to-do-mapping` config option is provided. If this configuration is not provided, a default string will be computed based on the base_dn returned by the GLAuth k8s charm. example: “dc=example,dc=com??sub?(&(objectClass=groupOfNames)(member={USER}))"

• ldap-user-to-dn-mapping | string

  A quote-enclosed JSON-string representing an ordered array of documents. Each document contains a regular expression match and either a substitution or ldapQuery template used for transforming the incoming username. Since the list is ordered, this order can be used to provide fine-grained tuning for building the right DN or the right ldapQuery for the user. example: '[{ match : "([^@]+)@([^@\\.]+)\\.example\\.com", substitution: "CN={0},CN=Users,DC={1},DC=example,DC=com" }]'

• pause-after-unit-refresh | string

  Default: first

  Wait for manual confirmation to resume refresh after these units refresh Allowed values: "all", "first", "none"

• role | string

  Default: replication

  role config option exists to deploy the charmed-mongodb application as a shard, config-server, or as a replica set.

• system-users | secret

  Configure the internal system users and their passwords. The passwords will be auto-generated if this option is not set. It is for internal use only and SHOULD NOT be used by applications. This must be a Juju Secret URI pointing to a secret that contains a map with the following content: `<username>: <password>`. Possible users: `charmed-backup`, `charmed-logrorate`, `charmed-stats`, `charmed-operator`. This option is only compatible with `replication` and `config-server` roles.

• tls-client-private-key | secret

  A Juju secret URI of a secret containing the private key for client-to-server TLS certificates.

• tls-peer-private-key | secret

  A Juju secret URI of a secret containing the private key for peer-to-peer TLS certificates.