Ops Manager를 위한 KMIP 백업 암호화 구성

kubectl -n mongodb create configmap mongodb-kmip-certificate-authority-pem --from-file=ca-pem

1
  apiVersion: mongodb.com/v1
2
  kind: MongoDBOpsManager
3
  metadata:
4
    name: om-backup-kmip
5
  spec:
6
    replicas: 1
7
    version: 8.0.0
8
    adminCredentials: ops-manager-admin-secret
9
    backup:
10
      encryption:
11
        kmip:
12
          server:
13
            url: kmip.corp.mongodb.com:5696
14
            ca: mongodb-kmip-certificate-authority-pem

kubectl apply -f <opsmgr-resource>.yaml

kubectl get om <resource-name> -o yaml -w

kubectl -n mongodb create secret tls mongodb-kmip-client-pem-my-replica-set-client-kmip \
--cert=<path-to-cert-file> \
--key=<path-to-key-file>

<clientCertificatePrefix>-<objectMeta.name>-client-kmip

1
  apiVersion: mongodb.com/v1
2
  kind: MongoDB
3
  metadata:
4
    name: my-replica-set
5
  spec:
6
    members: 3
7
    version: 8.0.0
8
    type: ReplicaSet
9
    backup:
10
      encryption:
11
        kmip:
12
          client:
13
            clientCertificatePrefix: mongodb-kmip-client-pem

kubectl apply -f <mdb-database-deployment>.yaml

kubectl get mdb <resource-name> -o yaml -w