[DOCS-15778] [MEKO] missing important role for blockstore user in OM CR reference Created: 06/Dec/22  Updated: 03/Jan/23  Resolved: 07/Dec/22

Status: Closed
Project: Documentation
Component/s: Kubernetes Operator
Affects Version/s: None
Fix Version/s: None

Type: Bug Priority: Major - P3
Reporter: Amit Jain Assignee: Sarah Simpers
Resolution: Done Votes: 0
Labels: cet-captain
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Participants:
Days since reply: 1 year, 9 weeks, 2 days ago
Story Points: 3

 Description   

In our Ops Manager Resource Specification, it says the following for spec.backup.blockStores.mongodbUserRef.name:

spec.backup.blockStores.mongodbUserRef.name
Type: string

Required if SCRAM authentication is enabled on the blockstore database.

Name of the MongoDB user resource used to connect to the blockstore database. Deploy this user resource in the same namespace as the Ops Manager resource and with the readWriteAnyDatabase and dbAdminAnyDatabase roles.

But in fact Ops Manager will try to run serverStatus, which neither of those roles provides. Please also add a 3rd required role, clusterMonitor which grants permission to run that command.

IMO the same change should be made for the following sections as well:


Generated at Thu Feb 08 08:13:51 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.