Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Use authentication to connect to Language Forge Mongo DB #812

Closed
rmunn opened this issue May 21, 2024 · 1 comment · Fixed by #817
Closed

Use authentication to connect to Language Forge Mongo DB #812

rmunn opened this issue May 21, 2024 · 1 comment · Fixed by #817
Assignees

Comments

@rmunn
Copy link
Contributor

rmunn commented May 21, 2024

Once sillsdev/web-languageforge#1787 is merged, the LexBox code that connects to LF Mongo will need to supply authentication. We may create a lexbox user that has read-only access to all databases, and use that user rather than the admin user that sillsdev/web-languageforge#1787 creates.

@rmunn
Copy link
Contributor Author

rmunn commented May 24, 2024

I've created a lexbox user with readAnyDatabase in both our staging and production LF instances. I also created a lexbox-dev user on LF staging: since we don't have a develop environment for LF right now (we used to have one, but it's non-functional at the moment), I decided that the LexBox dev instance will target LF staging.

I've created a secret named lf-mongo-auth in the languagedepot and/or languagedepot-dev namespaces for LexBox dev, staging, and prod. Next I'll create a LexBox PR to take those secrets and turn them into environment variables made available to the LexBox API pod. They will be named LF_MONGODB_AUTHSOURCE (to be used in the &authSource=foo part of the Mongo connection string), LF_MONGODB_USER, and LF_MONGODB_PASS.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant