Skip to content

Commit e6c84b0

Browse files
(DOCSP-17658): meko supports only x509 for internal cluster auth (#682)
* (DOCSP-17658): meko supports only x509 for internal cluster auth * (DOCSP-17658): copy review feedback
1 parent ab4a011 commit e6c84b0

File tree

2 files changed

+10
-2
lines changed

2 files changed

+10
-2
lines changed

source/includes/options-k8s-shared.yaml

Lines changed: 7 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1184,10 +1184,15 @@ description: |
11841184
- :setting:`spec.security.authentication.modes` ``: ["X509"]``
11851185
- :setting:`spec.security.tls.enabled` ``: true``
11861186
1187+
The |k8s-op-short| accepts the following values:
1188+
1189+
- ``["X509"]``: X.509 internal cluster authentication is enabled.
1190+
- ``""`` or omitted: internal cluster authentication is not enabled.
1191+
11871192
.. important::
11881193
1189-
Once internal cluster authentication is enabled, it can not be
1190-
disabled.
1194+
After you enable internal cluster authentication, you can't disable
1195+
it.
11911196
11921197
*(Changed in version 1.3)*:
11931198

source/tutorial/secure-internal-auth.txt

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -25,6 +25,9 @@ This guide instructs you on how to configure:
2525
- |tls| to encrypt connections client applications and MongoDB
2626
deployments.
2727

28+
The |k8s-op-short| doesn't support other authentication schemes between
29+
MongoDB nodes in a cluster.
30+
2831
.. include:: /includes/admonitions/cannot-secure-standalone.rst
2932

3033
.. include:: /includes/admonitions/deprecate-cert-generation.rst

0 commit comments

Comments
 (0)