Skip to content

K8SPSMDB-1146 clarify incode the purpose of the databaseAdmin user #2089

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 2 commits into
base: main
Choose a base branch
from
+11 −4
Open

K8SPSMDB-1146 clarify incode the purpose of the databaseAdmin user #2089

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
ce6d25e
K8SPSMDB-1146 clarify incode the purpose of the databaseAdmin user
gkech Oct 14, 2025
6df47e2
add docs for all the users
gkech Nov 17, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
15 changes: 11 additions & 4 deletions pkg/apis/psmdb/v1/psmdb_types.go
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -1302,11 +1302,18 @@ const (
type SystemUserRole string

const (
RoleDatabaseAdmin SystemUserRole = "databaseAdmin"
RoleClusterAdmin SystemUserRole = "clusterAdmin"
RoleUserAdmin SystemUserRole = "userAdmin"
// RoleDatabaseAdmin is general-purpose superuser account for cluster administration.
// This user is not used by the operator; it is intended for end-user access and management tasks.
RoleDatabaseAdmin SystemUserRole = "databaseAdmin"
// RoleClusterAdmin is used by the operator to perform cluster management operations
// such as adding/removing replica set members and managing sharded cluster topology.
RoleClusterAdmin SystemUserRole = "clusterAdmin"
// RoleUserAdmin is used by the operator to manage MongoDB users and their permissions.
RoleUserAdmin SystemUserRole = "userAdmin"
// RoleClusterMonitor is used for monitoring purposes, including PMM (Percona Monitoring and Management).
RoleClusterMonitor SystemUserRole = "clusterMonitor"
RoleBackup SystemUserRole = "backup"
// RoleBackup is used by the operator for backup and restore operations via PBM (Percona Backup for MongoDB).
RoleBackup SystemUserRole = "backup"
)

func InternalUserSecretName(cr *PerconaServerMongoDB) string {
Expand Down
Loading