Loading...

XML

Word

Printable

JSON

Server Compat:
- 7.0
- 8.0
- 8.1
Quarter:
- FY25Q2
Upstream Changes Summary:
Hide

DRIVERS-2882:
Summary of necessary driver changes

Add support for "k8s" ENVIRONMENT. Update legacy connection string tests. Ensure unified tests and machine tests can be run on kubernetes.

Commits for syncing spec/prose tests
(and/or refer to an existing language POC if needed)

https://github.com/mongodb/specifications/commit/bc988bb1e234bf22407e166c3b69c8a98bfac48d

https://github.com/mongodb/node-mongodb-native/commit/82c931c704d30f1a9555519d1ac2c9e03a2e69c4

https://github.com/mongodb-labs/drivers-evergreen-tools/blob/master/.evergreen/auth_oidc/k8s/README.md

Context for other referenced/linked tickets

Must be done after DRIVERS-2415
Show
DRIVERS-2882 : Summary of necessary driver changes Add support for "k8s" ENVIRONMENT. Update legacy connection string tests. Ensure unified tests and machine tests can be run on kubernetes. Commits for syncing spec/prose tests (and/or refer to an existing language POC if needed) https://github.com/mongodb/specifications/commit/bc988bb1e234bf22407e166c3b69c8a98bfac48d https://github.com/mongodb/node-mongodb-native/commit/82c931c704d30f1a9555519d1ac2c9e03a2e69c4 https://github.com/mongodb-labs/drivers-evergreen-tools/blob/master/.evergreen/auth_oidc/k8s/README.md Context for other referenced/linked tickets Must be done after DRIVERS-2415

Documentation Changes:
Needed
Documentation Changes Summary:
Hide

Add Kubernetes section to https://www.mongodb.com/docs/languages/python/pymongo-driver/current/security/enterprise-authentication/#mongodb-oidc.

Supports OpenID Connect provider token usage on Azure Kubernetes Service (Azure), Elastic Kubernetes Service (AWS), and Google Kubernetes Engine (Google Cloud). It will use the local token file on the Kubernetes pod to authenticate to the MongoDB server.

authMechanism: Set to "MONGODB-OIDC" properties = {"ENVIRONMENT": "k8s"}

Also, remove k8s from the "Other Azure Environments" section.
Show
Add Kubernetes section to https://www.mongodb.com/docs/languages/python/pymongo-driver/current/security/enterprise-authentication/#mongodb-oidc . Supports OpenID Connect provider token usage on Azure Kubernetes Service (Azure), Elastic Kubernetes Service (AWS), and Google Kubernetes Engine (Google Cloud). It will use the local token file on the Kubernetes pod to authenticate to the MongoDB server. authMechanism: Set to "MONGODB-OIDC" properties = { "ENVIRONMENT" : "k8s" } Also, remove k8s from the "Other Azure Environments" section.

This ticket was split from DRIVERS-2882, please see that ticket for a detailed description.

is duplicated by

PYTHON-5117 Reduce boilerplate needed to connect using oidc from a kubernetes workload

MOTOR-1293 Add Kubernetes Support for OIDC

split from

DRIVERS-2882 Add Kubernetes Support for OIDC