Skip to content

Commit 8b1c483

Browse files
jason-price-mongodbjason-price-mongodb
andauthored
DOCSP-48102-agent-certificates (#2107) (#2117)
* DOCSP-48102-agent-certificates * DOCSP-48102-agent-certificates * DOCSP-48102-agent-certificates --------- Co-authored-by: jason-price-mongodb <[email protected]> (cherry picked from commit 35e7692)
1 parent 980b2ef commit 8b1c483

File tree

2 files changed

+11
-25
lines changed

2 files changed

+11
-25
lines changed

source/includes/setting-k8sRsConf-spec.security.authentication.agents.clientCertificateSecretRef.name.rst

Lines changed: 7 additions & 15 deletions
Original file line numberDiff line numberDiff line change
@@ -6,23 +6,15 @@
66
Specifies the |k8s-secret| that contains the {+mdbagent+}\'s
77
|tls| certificate. If omitted, defaults to ``agent-certs``.
88

9-
This secret must contain the following keys, the
10-
values of which are |tls| certificates that can be validated by the
11-
server:
12-
13-
- ``mms-automation-agent-pem``
14-
- ``mms-backup-agent-pem``
15-
- ``mms-monitoring-agent-pem``
16-
9+
This secret must contain the ``mms-automation-agent-pem`` key. The
10+
value of this key must be a |tls| certificate that can be validated
11+
by the server.
12+
1713
You must create this secret in the same namespace to which you
1814
deploy the |k8s-op-short|:
1915

2016
.. code-block:: sh
2117
22-
kubectl create secret generic agent-certs \
23-
--from-file=mms-automation-agent-pem=<automation-cert.pem> \
24-
--from-file=mms-backup-agent-pem=<backup-cert.pem> \
25-
--from-file=mms-monitoring-agent-pem=<monitoring-cert.pem> \
26-
--namespace=<metadata.namespace>
27-
28-
18+
kubectl create secret generic agent-certs \
19+
--from-file=mms-automation-agent-pem=<automation-cert.pem> \
20+
--namespace=<metadata.namespace>

source/reference/k8s-operator-multi-cluster-specification.txt

Lines changed: 4 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -782,13 +782,9 @@ Optional ``MongoDBMultiCluster`` Resource Settings
782782
Specifies the |k8s-secret| that contains the {+mdbagent+}\'s
783783
|tls| certificate.
784784

785-
This secret must contain the following keys, the
786-
values of which are |tls| certificates that can be validated by the
787-
server:
788-
789-
- ``mms-automation-agent-pem``
790-
- ``mms-backup-agent-pem``
791-
- ``mms-monitoring-agent-pem``
785+
This secret must contain the ``mms-automation-agent-pem`` key. The
786+
value of this key must be a |tls| certificate that can be validated
787+
by the server.
792788

793789
You must create this secret in the same namespace to which you
794790
deploy the |k8s-op-short|:
@@ -797,9 +793,7 @@ Optional ``MongoDBMultiCluster`` Resource Settings
797793

798794
kubectl create secret generic agent-certs \
799795
--from-file=mms-automation-agent-pem=<automation-cert.pem> \
800-
--from-file=mms-backup-agent-pem=<backup-cert.pem> \
801-
--from-file=mms-monitoring-agent-pem=<monitoring-cert.pem> \
802-
--namespace=<metadata.namespace>
796+
--namespace=<metadata.namespace>
803797

804798
.. _multi-spec-security-authentication-enabled:
805799

0 commit comments

Comments
 (0)