Uploaded image for project: 'Percona Operator for MongoDB'
  1. Percona Operator for MongoDB
  2. K8SPSMDB-670

clusterMonitor user roles are not updated on upgrade

Details

    • Bug
    • Status: Done
    • Medium
    • Resolution: Fixed
    • 1.12.0
    • 1.12.0
    • None
    • Yes

    Description

      This is related to this fix: https://jira.percona.com/browse/K8SPSMDB-624
      We fixed clusterMonitor credentials, but we don't update them on upgrade from 1.11 to 1.12.
      To be honest I'm not sure if that would be painful to do or not so reporting just that it is known and we can decide how to proceed.

      So explainRole is not created and proper roles are not added to clusterMonitor user:

      rs0:PRIMARY> db.system.roles.find()
      { "_id" : "admin.pbmAnyAction", "role" : "pbmAnyAction", "db" : "admin", "privileges" : [ { "resource" : { "anyResource" : true }, "actions" : [ "anyAction" ] } ], "roles" : [ ] }
      
      rs0:PRIMARY> db.system.users.find().pretty()
      {
              "_id" : "admin.clusterMonitor",
              "userId" : UUID("579d5d75-fcaf-4ae5-b23b-a95015734943"),
              "user" : "clusterMonitor",
              "db" : "admin",
              "credentials" : {
                      "SCRAM-SHA-1" : {
                              "iterationCount" : 10000,
                              "salt" : "b/4Kaj/pb1r5zLQ3DwvNxg==",
                              "storedKey" : "0QCtBvptyUxZpy5rHa5ViEIkpAY=",
                              "serverKey" : "1OWj1VxDf2TQjKdL/3gknAphSQo="
                      },
                      "SCRAM-SHA-256" : {
                              "iterationCount" : 15000,
                              "salt" : "14rRj4xMiACqwniuILidxRwcdrbqGlZ5rIk72A==",
                              "storedKey" : "lIq8WPn8cmkMBIPbLmxtTHQITDtScH5Ui2Ol3Hv+GPk=",
                              "serverKey" : "xLZPfv3FuQOi6tCIo/+fc0AxpkqdecZauWeduE9YiCc="
                      }
              },
              "roles" : [
                      {
                              "role" : "clusterMonitor",
                              "db" : "admin"
                      }
              ]
      }
      

      Attachments

        Issue Links

          Activity

            People

              andrii.dema Andrii Dema
              tomislav.plavcic@percona.com Tomislav Plavcic
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Smart Checklist