Create admin user by default

General

Escalation

General

Escalation

Description

Currently when we deploy MongoDB we create two users in the cluster for users:

clusterAdmin - to manage cluster params
userAdmin - to manage users

It would be simpler if we also provide an admin user that can provision databases, collections and perform data modifications out of the box.

Also we see the same at:

cluster control
digital ocean managed mongodb
atlas

From what I see this user has the following permissions:

"authenticatedUserRoles" : [
                        {
                                "role" : "readWriteAnyDatabase",
                                "db" : "admin"
                        },
                        {
                                "role" : "readAnyDatabase",
                                "db" : "admin"
                        },
                        {
                                "role" : "restore",
                                "db" : "admin"
                        },
                        {
                                "role" : "backup",
                                "db" : "admin"
                        },
                        {
                                "role" : "dbAdminAnyDatabase",
                                "db" : "admin"
                        },
                        {
                                "role" : "clusterMonitor",
                                "db" : "admin"
                        }
                ]

Environment

None

Linked work items

causes

PMM-9860

Use admin user in PMM DBaaS for MongoDB

PMM-10355

Add a new password to PSMDB operator

Activity

Wenjian JIANG

August 25, 2022 at 9:58 AM

Hi, It's good to hear this improvement, and I wonder if this feature also including provision the application user / database / collections out of box?

Since in my experience, after cluster is refresh installed, we have to create another k8s Job to:

connect to the cluster (we also need to wait for the cluster is ready in the k8s job)
mount the user admin account / password into the job
run customized mongodb script to create our own application user / password (authenticating as user admin)
after the user creation is done, we switched to the new created application user to
1. create database
2. provision initial data

So I am wondering if this feature can create the application user for us, so we can just use in our application, no more k8s job.

Thanks

Resize issue view side panel

Done

Details

Assignee

dmitriy.kostiuk(Deactivated)

Reporter

Sergey Pronin(Deactivated)

Needs QA

Yes

Needs Doc

Yes

Fix versions

1.13.0

Priority

Medium

Created January 28, 2022 at 2:28 PM

Updated March 5, 2024 at 4:44 PM

Resolved September 5, 2022 at 4:21 PM