Charmed MongoDB K8s Explanation | Users

Internal users

Charmed MongoDB has the following internal users:

user function
operator Admin user that manages database/cluster (i.e. admin)
monitor Manages COS integration
backup Manages all backup operations

The full list of internal users is available in charm source code.

Full dump of internal users (on the newly installed charm):

mongodb-k8s [primary] admin> db.system.users.find()
[
  { _id: 'admin.operator', userId: new UUID("f4466ca5-7640-4af3-b9eb-6b5a2313696a"), user: 'operator', db: 'admin', credentials: { 'SCRAM-SHA-256': { iterationCount: 15000, salt: 'F6HeW8j0Vseza/r3anU6cHBy+Uiu1f8nmMn8TA==', storedKey: 'yHi6aWAs0blfXiePgh9nkzXw/Vr0JBhBUV0VmXysx+s=', serverKey: 'sJpXiPUrEEV9qlf8ZFng0zolN0Ii3MXKnta1mvaVTEI=' } }, roles: [ { role: 'readWriteAnyDatabase', db: 'admin' }, { role: 'clusterAdmin', db: 'admin' }, { role: 'userAdminAnyDatabase', db: 'admin' } ] },
  { _id: 'admin.backup', userId: new UUID("ece48d5e-985a-4863-8660-8fa2e1a0aa7d"), user: 'backup', db: 'admin', credentials: { 'SCRAM-SHA-256': { iterationCount: 15000, salt: 'QktAJGMGslnfpHg6p/Dd7eGlYb8uzBdBsCEiwg==', storedKey: '/abOk7NijI9u7rf8leRcnpBYImGshmGW7BsXwVpFYrQ=', serverKey: 'QWYXFJm1GhqrGjvqZTAtdKGitL+8B1LNIF3OmkiYyiU=' } }, roles: [ { role: 'readWrite', db: 'admin' }, { role: 'clusterMonitor', db: 'admin' }, { role: 'backup', db: 'admin' }, { role: 'pbmAnyAction', db: 'admin' }, { role: 'restore', db: 'admin' } ] },
  { _id: 'admin.monitor', userId: new UUID("59560831-741d-4417-938a-68056bc80c47"), user: 'monitor', db: 'admin', credentials: { 'SCRAM-SHA-256': { iterationCount: 15000, salt: 'QElyLpAw5PFmc4juu6Nk94Hv/4H1RxQfDgVEyg==', storedKey: 'bW2wC8DheiNkSMdMtZcq149qE9hKIErgcJVtRRghhqA=', serverKey: 'AU271CqwEMTFDorYRPVgyU1J5SvNLIVFWAItw19TvOg=' } }, roles: [ { role: 'clusterMonitor', db: 'admin' }, { role: 'explainRole', db: 'admin' }, { role: 'read', db: 'local' } ] }
]

Note: These users are dedicated to the operator’s logic, and using them incorrectly could damage your deployment.

Use the data-integrator charm to manage external credentials. To learn more, see How To > Manage client connections