Skip to content

K8SPSMDB-1444 Don't create keyfile secret when x509 auth is used #2391

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
nmarukovich merged 22 commits into from
Jun 18, 2026
Merged

K8SPSMDB-1444 Don't create keyfile secret when x509 auth is used #2391

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
22 commits
Select commit Hold shift + click to select a range
61873bb
K8SPSMDB-1444 delete unused keyfile
nmarukovich Jun 9, 2026
84fd2f7
add e2e-tests
nmarukovich Jun 9, 2026
280cfbc
Merge branch 'main' into K8SPSMDB-1444
nmarukovich Jun 9, 2026
525477e
delete unused files
nmarukovich Jun 9, 2026
f6d6bf6
Merge branch 'K8SPSMDB-1444' of github.com:percona/percona-server-mon…
nmarukovich Jun 9, 2026
dc82872
fix tests
nmarukovich Jun 10, 2026
830ae83
Merge branch 'main' into K8SPSMDB-1444
nmarukovich Jun 10, 2026
4440b3d
fix conflict
nmarukovich Jun 11, 2026
0eb8a0b
fix conflict
nmarukovich Jun 11, 2026
3dfad7d
fix test
nmarukovich Jun 11, 2026
b40c5ef
fix e2e tests
nmarukovich Jun 11, 2026
595dc07
fix conflicts
nmarukovich Jun 11, 2026
81d66d1
Merge branch 'main' of github.com:percona/percona-server-mongodb-oper…
nmarukovich Jun 12, 2026
e104015
fix tests
nmarukovich Jun 12, 2026
7c389ef
fix test
nmarukovich Jun 14, 2026
e03179b
Merge branch 'main' of github.com:percona/percona-server-mongodb-oper…
nmarukovich Jun 14, 2026
65603f0
fix tests
nmarukovich Jun 14, 2026
23532eb
fix tests
nmarukovich Jun 15, 2026
deaeecb
fix test
nmarukovich Jun 15, 2026
9f49d02
Merge branch 'main' into K8SPSMDB-1444
nmarukovich Jun 17, 2026
9301b8f
Merge branch 'main' into K8SPSMDB-1444
nmarukovich Jun 17, 2026
cbf9fce
Merge branch 'main' into K8SPSMDB-1444
nmarukovich Jun 17, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 0 additions & 8 deletions e2e-tests/arbiter/compare/statefulset_arbiter-clusterip-rs0-arbiter-oc.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -132,9 +132,6 @@ spec:
volumeMounts:
- mountPath: /data/db
name: mongod-data
- mountPath: /etc/mongodb-secrets
name: arbiter-clusterip-mongodb-keyfile
readOnly: true
- mountPath: /etc/mongodb-ssl
name: ssl
readOnly: true
Expand Down Expand Up @@ -174,11 +171,6 @@ spec:
serviceAccountName: default
terminationGracePeriodSeconds: 60
volumes:
- name: arbiter-clusterip-mongodb-keyfile
secret:
defaultMode: 288
optional: false
secretName: arbiter-clusterip-mongodb-keyfile
- emptyDir: {}
name: bin
- emptyDir: {}
Expand Down
8 changes: 0 additions & 8 deletions e2e-tests/arbiter/compare/statefulset_arbiter-clusterip-rs0-arbiter.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -127,9 +127,6 @@ spec:
volumeMounts:
- mountPath: /data/db
name: mongod-data
- mountPath: /etc/mongodb-secrets
name: arbiter-clusterip-mongodb-keyfile
readOnly: true
- mountPath: /etc/mongodb-ssl
name: ssl
readOnly: true
Expand Down Expand Up @@ -168,11 +165,6 @@ spec:
serviceAccountName: default
terminationGracePeriodSeconds: 60
volumes:
- name: arbiter-clusterip-mongodb-keyfile
secret:
defaultMode: 288
optional: false
secretName: arbiter-clusterip-mongodb-keyfile
- emptyDir: {}
name: bin
- emptyDir: {}
Expand Down
8 changes: 0 additions & 8 deletions e2e-tests/arbiter/compare/statefulset_arbiter-rs0-arbiter-oc.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -133,9 +133,6 @@ spec:
volumeMounts:
- mountPath: /data/db
name: mongod-data
- mountPath: /etc/mongodb-secrets
name: arbiter-mongodb-keyfile
readOnly: true
- mountPath: /etc/mongodb-ssl
name: ssl
readOnly: true
Expand Down Expand Up @@ -171,11 +168,6 @@ spec:
securityContext: {}
terminationGracePeriodSeconds: 60
volumes:
- name: arbiter-mongodb-keyfile
secret:
defaultMode: 288
optional: false
secretName: arbiter-mongodb-keyfile
- emptyDir: {}
name: bin
- emptyDir: {}
Expand Down
8 changes: 0 additions & 8 deletions e2e-tests/arbiter/compare/statefulset_arbiter-rs0-arbiter.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -134,9 +134,6 @@ spec:
volumeMounts:
- mountPath: /data/db
name: mongod-data
- mountPath: /etc/mongodb-secrets
name: arbiter-mongodb-keyfile
readOnly: true
- mountPath: /etc/mongodb-ssl
name: ssl
readOnly: true
Expand Down Expand Up @@ -173,11 +170,6 @@ spec:
fsGroup: 1001
terminationGracePeriodSeconds: 60
volumes:
- name: arbiter-mongodb-keyfile
secret:
defaultMode: 288
optional: false
secretName: arbiter-mongodb-keyfile
- emptyDir: {}
name: bin
- emptyDir: {}
Expand Down
8 changes: 0 additions & 8 deletions e2e-tests/custom-tls/compare/statefulset_some-name-cfg-oc.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -133,9 +133,6 @@ spec:
volumeMounts:
- mountPath: /data/db
name: mongod-data
- mountPath: /etc/mongodb-secrets
name: some-name-mongodb-keyfile
readOnly: true
- mountPath: /etc/mongodb-ssl
name: ssl
readOnly: true
Expand Down Expand Up @@ -171,11 +168,6 @@ spec:
serviceAccountName: default
terminationGracePeriodSeconds: 60
volumes:
- name: some-name-mongodb-keyfile
secret:
defaultMode: 288
optional: false
secretName: some-name-mongodb-keyfile
- emptyDir: {}
name: bin
- emptyDir: {}
Expand Down
8 changes: 0 additions & 8 deletions e2e-tests/custom-tls/compare/statefulset_some-name-cfg.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -134,9 +134,6 @@ spec:
volumeMounts:
- mountPath: /data/db
name: mongod-data
- mountPath: /etc/mongodb-secrets
name: some-name-mongodb-keyfile
readOnly: true
- mountPath: /etc/mongodb-ssl
name: ssl
readOnly: true
Expand Down Expand Up @@ -173,11 +170,6 @@ spec:
serviceAccountName: default
terminationGracePeriodSeconds: 60
volumes:
- name: some-name-mongodb-keyfile
secret:
defaultMode: 288
optional: false
secretName: some-name-mongodb-keyfile
- emptyDir: {}
name: bin
- emptyDir: {}
Expand Down
8 changes: 0 additions & 8 deletions e2e-tests/custom-tls/compare/statefulset_some-name-mongos-oc.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -124,9 +124,6 @@ spec:
volumeMounts:
- mountPath: /data/db
name: mongod-data
- mountPath: /etc/mongodb-secrets
name: some-name-mongodb-keyfile
readOnly: true
- mountPath: /etc/mongodb-ssl
name: ssl
readOnly: true
Expand Down Expand Up @@ -158,11 +155,6 @@ spec:
serviceAccountName: default
terminationGracePeriodSeconds: 60
volumes:
- name: some-name-mongodb-keyfile
secret:
defaultMode: 288
optional: false
secretName: some-name-mongodb-keyfile
- name: ssl
secret:
defaultMode: 288
Expand Down
8 changes: 0 additions & 8 deletions e2e-tests/custom-tls/compare/statefulset_some-name-mongos.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -125,9 +125,6 @@ spec:
volumeMounts:
- mountPath: /data/db
name: mongod-data
- mountPath: /etc/mongodb-secrets
name: some-name-mongodb-keyfile
readOnly: true
- mountPath: /etc/mongodb-ssl
name: ssl
readOnly: true
Expand Down Expand Up @@ -160,11 +157,6 @@ spec:
serviceAccountName: default
terminationGracePeriodSeconds: 60
volumes:
- name: some-name-mongodb-keyfile
secret:
defaultMode: 288
optional: false
secretName: some-name-mongodb-keyfile
- name: ssl
secret:
defaultMode: 288
Expand Down
8 changes: 0 additions & 8 deletions e2e-tests/custom-tls/compare/statefulset_some-name-rs0-oc.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -128,9 +128,6 @@ spec:
volumeMounts:
- mountPath: /data/db
name: mongod-data
- mountPath: /etc/mongodb-secrets
name: some-name-mongodb-keyfile
readOnly: true
- mountPath: /etc/mongodb-ssl
name: ssl
readOnly: true
Expand Down Expand Up @@ -172,11 +169,6 @@ spec:
serviceAccountName: default
terminationGracePeriodSeconds: 60
volumes:
- name: some-name-mongodb-keyfile
secret:
defaultMode: 288
optional: false
secretName: some-name-mongodb-keyfile
- emptyDir: {}
name: bin
- emptyDir: {}
Expand Down
8 changes: 0 additions & 8 deletions e2e-tests/custom-tls/compare/statefulset_some-name-rs0.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -129,9 +129,6 @@ spec:
volumeMounts:
- mountPath: /data/db
name: mongod-data
- mountPath: /etc/mongodb-secrets
name: some-name-mongodb-keyfile
readOnly: true
- mountPath: /etc/mongodb-ssl
name: ssl
readOnly: true
Expand Down Expand Up @@ -174,11 +171,6 @@ spec:
serviceAccountName: default
terminationGracePeriodSeconds: 60
volumes:
- name: some-name-mongodb-keyfile
secret:
defaultMode: 288
optional: false
secretName: some-name-mongodb-keyfile
- emptyDir: {}
name: bin
- emptyDir: {}
Expand Down
8 changes: 0 additions & 8 deletions e2e-tests/custom-users-roles-sharded/compare/statefulset_some-name-cfg-4-oc.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -133,9 +133,6 @@ spec:
volumeMounts:
- mountPath: /data/db
name: mongod-data
- mountPath: /etc/mongodb-secrets
name: some-name-mongodb-keyfile
readOnly: true
- mountPath: /etc/mongodb-ssl
name: ssl
readOnly: true
Expand Down Expand Up @@ -182,11 +179,6 @@ spec:
serviceAccountName: default
terminationGracePeriodSeconds: 60
volumes:
- name: some-name-mongodb-keyfile
secret:
defaultMode: 288
optional: false
secretName: some-name-mongodb-keyfile
- emptyDir: {}
name: bin
- emptyDir: {}
Expand Down
8 changes: 0 additions & 8 deletions e2e-tests/custom-users-roles-sharded/compare/statefulset_some-name-cfg-oc.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -133,9 +133,6 @@ spec:
volumeMounts:
- mountPath: /data/db
name: mongod-data
- mountPath: /etc/mongodb-secrets
name: some-name-mongodb-keyfile
readOnly: true
- mountPath: /etc/mongodb-ssl
name: ssl
readOnly: true
Expand Down Expand Up @@ -181,11 +178,6 @@ spec:
serviceAccountName: default
terminationGracePeriodSeconds: 60
volumes:
- name: some-name-mongodb-keyfile
secret:
defaultMode: 288
optional: false
secretName: some-name-mongodb-keyfile
- emptyDir: {}
name: bin
- emptyDir: {}
Expand Down
8 changes: 0 additions & 8 deletions e2e-tests/custom-users-roles-sharded/compare/statefulset_some-name-cfg.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -134,9 +134,6 @@ spec:
volumeMounts:
- mountPath: /data/db
name: mongod-data
- mountPath: /etc/mongodb-secrets
name: some-name-mongodb-keyfile
readOnly: true
- mountPath: /etc/mongodb-ssl
name: ssl
readOnly: true
Expand Down Expand Up @@ -184,11 +181,6 @@ spec:
serviceAccountName: default
terminationGracePeriodSeconds: 60
volumes:
- name: some-name-mongodb-keyfile
secret:
defaultMode: 288
optional: false
secretName: some-name-mongodb-keyfile
- emptyDir: {}
name: bin
- emptyDir: {}
Expand Down
8 changes: 0 additions & 8 deletions e2e-tests/custom-users-roles-sharded/compare/statefulset_some-name-mongos-4-oc.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -125,9 +125,6 @@ spec:
volumeMounts:
- mountPath: /data/db
name: mongod-data
- mountPath: /etc/mongodb-secrets
name: some-name-mongodb-keyfile
readOnly: true
- mountPath: /etc/mongodb-ssl
name: ssl
readOnly: true
Expand Down Expand Up @@ -172,11 +169,6 @@ spec:
serviceAccountName: default
terminationGracePeriodSeconds: 60
volumes:
- name: some-name-mongodb-keyfile
secret:
defaultMode: 288
optional: false
secretName: some-name-mongodb-keyfile
- name: ssl
secret:
defaultMode: 288
Expand Down
8 changes: 0 additions & 8 deletions e2e-tests/custom-users-roles-sharded/compare/statefulset_some-name-mongos-oc.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -123,9 +123,6 @@ spec:
volumeMounts:
- mountPath: /data/db
name: mongod-data
- mountPath: /etc/mongodb-secrets
name: some-name-mongodb-keyfile
readOnly: true
- mountPath: /etc/mongodb-ssl
name: ssl
readOnly: true
Expand Down Expand Up @@ -171,11 +168,6 @@ spec:
serviceAccountName: default
terminationGracePeriodSeconds: 60
volumes:
- name: some-name-mongodb-keyfile
secret:
defaultMode: 288
optional: false
secretName: some-name-mongodb-keyfile
- name: ssl
secret:
defaultMode: 288
Expand Down
8 changes: 0 additions & 8 deletions e2e-tests/custom-users-roles-sharded/compare/statefulset_some-name-mongos.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -126,9 +126,6 @@ spec:
volumeMounts:
- mountPath: /data/db
name: mongod-data
- mountPath: /etc/mongodb-secrets
name: some-name-mongodb-keyfile
readOnly: true
- mountPath: /etc/mongodb-ssl
name: ssl
readOnly: true
Expand Down Expand Up @@ -174,11 +171,6 @@ spec:
serviceAccountName: default
terminationGracePeriodSeconds: 60
volumes:
- name: some-name-mongodb-keyfile
secret:
defaultMode: 288
optional: false
secretName: some-name-mongodb-keyfile
- name: ssl
secret:
defaultMode: 288
Expand Down
8 changes: 0 additions & 8 deletions e2e-tests/custom-users-roles-sharded/compare/statefulset_some-name-rs0-4-oc.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -129,9 +129,6 @@ spec:
volumeMounts:
- mountPath: /data/db
name: mongod-data
- mountPath: /etc/mongodb-secrets
name: some-name-mongodb-keyfile
readOnly: true
- mountPath: /etc/mongodb-ssl
name: ssl
readOnly: true
Expand Down Expand Up @@ -186,11 +183,6 @@ spec:
serviceAccountName: default
terminationGracePeriodSeconds: 60
volumes:
- name: some-name-mongodb-keyfile
secret:
defaultMode: 288
optional: false
secretName: some-name-mongodb-keyfile
- emptyDir: {}
name: bin
- emptyDir: {}
Expand Down
8 changes: 0 additions & 8 deletions e2e-tests/custom-users-roles-sharded/compare/statefulset_some-name-rs0-oc.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -129,9 +129,6 @@ spec:
volumeMounts:
- mountPath: /data/db
name: mongod-data
- mountPath: /etc/mongodb-secrets
name: some-name-mongodb-keyfile
readOnly: true
- mountPath: /etc/mongodb-ssl
name: ssl
readOnly: true
Expand Down Expand Up @@ -185,11 +182,6 @@ spec:
serviceAccountName: default
terminationGracePeriodSeconds: 60
volumes:
- name: some-name-mongodb-keyfile
secret:
defaultMode: 288
optional: false
secretName: some-name-mongodb-keyfile
- emptyDir: {}
name: bin
- emptyDir: {}
Expand Down
Loading
Loading