Closed Jorres closed 1 month ago
implemented at PRs #158 and #159
It is now possible to use field enable enforce_static_user_credentials: true
in configuration YAML. YDB operator support 3 types of auth: anonymous
(by default), access_token
(oauth) and static credentials
(username/password). Default password are using at init new cluster storage process if other not specified (just do not specify password field).
In general ydb-operator obtain a token from secretKeyRef
from Storage spec.operatorConnection
section and use that in following communication with YDB
operatorConnection:
accessToken:
secretKeyRef:
name: "mystorage-token"
key: "token"
staticCredentials:
username: "root"
password:
secretKeyRef:
name: "mystorage-root-password"
key: "password"
Feature Request
Describe the Feature Request
At this point, operator is unable to connect to the database if
enforce_static_user_credentials
in Storage config is set totrue
Relevant error:
Additional Context
Internal ticket YDBOPS-6056