Skip to content

Commit 5b0bd5c

Browse files
jason-price-mongodbjason-price-mongodb
andauthored
DOCSP-48102-agent-certificates (#2107) (#2121)
* DOCSP-48102-agent-certificates * DOCSP-48102-agent-certificates * DOCSP-48102-agent-certificates --------- Co-authored-by: jason-price-mongodb <[email protected]> (cherry picked from commit 35e7692)
1 parent 69e8d40 commit 5b0bd5c

File tree

2 files changed

+11
-25
lines changed

2 files changed

+11
-25
lines changed

source/includes/setting-k8sRsConf-spec.security.authentication.agents.clientCertificateSecretRef.name.rst

Lines changed: 7 additions & 15 deletions
Original file line numberDiff line numberDiff line change
@@ -6,23 +6,15 @@
66
Specifies the |k8s-secret| that contains the {+mdbagent+}\'s
77
|tls| certificate. If omitted, defaults to ``agent-certs``.
88

9-
This secret must contain the following keys, the
10-
values of which are |tls| certificates that can be validated by the
11-
server:
12-
13-
- ``mms-automation-agent-pem``
14-
- ``mms-backup-agent-pem``
15-
- ``mms-monitoring-agent-pem``
16-
9+
This secret must contain the ``mms-automation-agent-pem`` key. The
10+
value of this key must be a |tls| certificate that can be validated
11+
by the server.
12+
1713
You must create this secret in the same namespace to which you
1814
deploy the |k8s-op-short|:
1915

2016
.. code-block:: sh
2117
22-
kubectl create secret generic agent-certs \
23-
--from-file=mms-automation-agent-pem=<automation-cert.pem> \
24-
--from-file=mms-backup-agent-pem=<backup-cert.pem> \
25-
--from-file=mms-monitoring-agent-pem=<monitoring-cert.pem> \
26-
--namespace=<metadata.namespace>
27-
28-
18+
kubectl create secret generic agent-certs \
19+
--from-file=mms-automation-agent-pem=<automation-cert.pem> \
20+
--namespace=<metadata.namespace>

source/reference/k8s-operator-multi-cluster-specification.txt

Lines changed: 4 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -789,13 +789,9 @@ Optional ``MongoDBMultiCluster`` Resource Settings
789789
Specifies the |k8s-secret| that contains the {+mdbagent+}\'s
790790
|tls| certificate.
791791

792-
This secret must contain the following keys, the
793-
values of which are |tls| certificates that can be validated by the
794-
server:
795-
796-
- ``mms-automation-agent-pem``
797-
- ``mms-backup-agent-pem``
798-
- ``mms-monitoring-agent-pem``
792+
This secret must contain the ``mms-automation-agent-pem`` key. The
793+
value of this key must be a |tls| certificate that can be validated
794+
by the server.
799795

800796
You must create this secret in the same namespace to which you
801797
deploy the |k8s-op-short|:
@@ -804,9 +800,7 @@ Optional ``MongoDBMultiCluster`` Resource Settings
804800

805801
kubectl create secret generic agent-certs \
806802
--from-file=mms-automation-agent-pem=<automation-cert.pem> \
807-
--from-file=mms-backup-agent-pem=<backup-cert.pem> \
808-
--from-file=mms-monitoring-agent-pem=<monitoring-cert.pem> \
809-
--namespace=<metadata.namespace>
803+
--namespace=<metadata.namespace>
810804

811805
.. _multi-spec-security-authentication-enabled:
812806

0 commit comments

Comments
 (0)