No way to turn off authentication

[aqeelat]

Report

We cannot disable authentication even if we pass this as a conf

security:
  authorization: "disabled"

More about the problem

--auth is being passed, which overrides the mongod.conf

percona-server-mongodb-operator/pkg/psmdb/container.go

Lines 176 to 184 in f10e1aa

	args := []string{
	"--bind_ip_all",
	"--auth",
	"--dbpath=" + MongodContainerDataDir,
	"--port=" + strconv.Itoa(int(api.DefaultMongodPort)),
	"--replSet=" + replset.Name,
	"--storageEngine=" + string(replset.Storage.Engine),
	"--relaxPermChecks",
	}

Steps to reproduce

Deploy with:

spec:
  ...
  replsets:
    - name: rs0
      size: 3
      configuration: |
        security:
          authorization: "disabled"

Versions

1. Kubernetes: 1.28
2. Operator: 1.16.1
3. Database: 7.0.8-5

Anything else?

This would be fine if there'a a way to create users using the crd.

[spron-in]

@aqeelat thank you for raising this.
@egegunes do you know if it is possible?

[lev-stas]

I can confirm the issue. I have tried to disable authentication via crd and using custom configmap. Both variants haven't effect.