[DOCS-3716] Clarify permissions necessary for MMS monitoring agent Created: 07/Jul/14  Updated: 16/Mar/15  Resolved: 16/Jul/14

Status: Closed
Project: Documentation
Component/s: Cloud Manager
Affects Version/s: None
Fix Version/s: v1.3.8

Type: Improvement Priority: Major - P3
Reporter: William Berkeley Assignee: Sam Kleinman (Inactive)
Resolution: Done Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Issue Links:
Related
Participants:
Days since reply: 9 years, 24 weeks, 1 day ago

 Description   

Basically, the MMS monitoring agent has two ways that it tries to read the oplog. One requires read on the local database and the other requires the permissions in the 2.6 clusterMonitor role. The clusterMonitor role does not give read on the local database. Users are seeing mongod log messages about unauthorized queries to the local db because the monitoring agent currently attempts both methods. The logic may change in the future but in the meantime we should clarify the source of the messages in the mongod log and clarify the fact that they are benign and can be ignored if the mms agent log does not show errors.

The page about MMS agent authorization looks like a good spot for a note about this.



 Comments   
Comment by Githook User [ 02/Sep/14 ]

Author:

{u'username': u'tychoish', u'name': u'Sam Kleinman', u'email': u'samk@10gen.com'}

Message: DOCS-3716: clarify auth error
Branch: next
https://github.com/10gen/mms-docs/commit/2ffde3ffedb7241842537bafb3c843ae785442de

Comment by Githook User [ 16/Jul/14 ]

Author:

{u'username': u'tychoish', u'name': u'Sam Kleinman', u'email': u'samk@10gen.com'}

Message: DOCS-3716: clarify auth error
Branch: v1.4
https://github.com/10gen/mms-docs/commit/4753bad672ff467a2031e9763bbc6d1e1f90074c

Comment by Githook User [ 16/Jul/14 ]

Author:

{u'username': u'tychoish', u'name': u'Sam Kleinman', u'email': u'samk@10gen.com'}

Message: DOCS-3716: clarify auth error
Branch: master
https://github.com/10gen/mms-docs/commit/2ffde3ffedb7241842537bafb3c843ae785442de

Generated at Thu Feb 08 07:46:21 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.