Skip to content

Commit d9f3c97

Browse files
jason-price-mongodbjason-price-mongodb
andauthored
DOCSP-48102-agent-certificates (#2107) (#2122)
* DOCSP-48102-agent-certificates * DOCSP-48102-agent-certificates * DOCSP-48102-agent-certificates --------- Co-authored-by: jason-price-mongodb <[email protected]> (cherry picked from commit 35e7692)
1 parent ba06c85 commit d9f3c97

File tree

2 files changed

+11
-25
lines changed

2 files changed

+11
-25
lines changed

source/includes/setting-k8sRsConf-spec.security.authentication.agents.clientCertificateSecretRef.name.rst

Lines changed: 7 additions & 15 deletions
Original file line numberDiff line numberDiff line change
@@ -6,23 +6,15 @@
66
Specifies the |k8s-secret| that contains the {+mdbagent+}\'s
77
|tls| certificate. If omitted, defaults to ``agent-certs``.
88

9-
This secret must contain the following keys, the
10-
values of which are |tls| certificates that can be validated by the
11-
server:
12-
13-
- ``mms-automation-agent-pem``
14-
- ``mms-backup-agent-pem``
15-
- ``mms-monitoring-agent-pem``
16-
9+
This secret must contain the ``mms-automation-agent-pem`` key. The
10+
value of this key must be a |tls| certificate that can be validated
11+
by the server.
12+
1713
You must create this secret in the same namespace to which you
1814
deploy the |k8s-op-short|:
1915

2016
.. code-block:: sh
2117
22-
kubectl create secret generic agent-certs \
23-
--from-file=mms-automation-agent-pem=<automation-cert.pem> \
24-
--from-file=mms-backup-agent-pem=<backup-cert.pem> \
25-
--from-file=mms-monitoring-agent-pem=<monitoring-cert.pem> \
26-
--namespace=<metadata.namespace>
27-
28-
18+
kubectl create secret generic agent-certs \
19+
--from-file=mms-automation-agent-pem=<automation-cert.pem> \
20+
--namespace=<metadata.namespace>

source/reference/k8s-operator-multi-cluster-specification.txt

Lines changed: 4 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -790,13 +790,9 @@ Optional ``MongoDBMultiCluster`` Resource Settings
790790
Specifies the |k8s-secret| that contains the {+mdbagent+}\'s
791791
|tls| certificate.
792792

793-
This secret must contain the following keys, the
794-
values of which are |tls| certificates that can be validated by the
795-
server:
796-
797-
- ``mms-automation-agent-pem``
798-
- ``mms-backup-agent-pem``
799-
- ``mms-monitoring-agent-pem``
793+
This secret must contain the ``mms-automation-agent-pem`` key. The
794+
value of this key must be a |tls| certificate that can be validated
795+
by the server.
800796

801797
You must create this secret in the same namespace to which you
802798
deploy the |k8s-op-short|:
@@ -805,9 +801,7 @@ Optional ``MongoDBMultiCluster`` Resource Settings
805801

806802
kubectl create secret generic agent-certs \
807803
--from-file=mms-automation-agent-pem=<automation-cert.pem> \
808-
--from-file=mms-backup-agent-pem=<backup-cert.pem> \
809-
--from-file=mms-monitoring-agent-pem=<monitoring-cert.pem> \
810-
--namespace=<metadata.namespace>
804+
--namespace=<metadata.namespace>
811805

812806
.. _multi-spec-security-authentication-enabled:
813807

0 commit comments

Comments
 (0)