K8SPSMDB-1146: User management improvements and roles management

config/crd/bases/psmdb.percona.com_perconaservermongodbs.yaml

@@ -8226,6 +8226,64 @@ spec:
                   - size
                   type: object
                 type: array
+              roles:
+                items:
+                  properties:
+                    authenticationRestrictions:
+                      items:
+                        properties:
+                          clientSource:
+                            items:
+                              type: string
+                            type: array
+                          serverAddress:
+                            items:
+                              type: string
+                            type: array
+                        type: object
+                      type: array
+                    db:
+                      type: string
+                    privileges:
+                      items:
+                        properties:
+                          actions:
+                            items:
+                              type: string
+                            type: array
+                          resource:
+                            properties:
+                              cluster:
+                                type: boolean
+                              collection:
+                                type: string
+                              db:
+                                type: string
+                            type: object
+                        required:
+                        - actions
+                        type: object
+                      type: array
+                    role:
+                      type: string
+                    roles:
+                      items:
+                        properties:
+                          db:
+                            type: string
+                          role:
+                            type: string
+                        required:
+                        - db
+                        - role
+                        type: object
+                      type: array
+                  required:
+                  - db
+                  - privileges
+                  - role
+                  type: object
+                type: array
               schedulerName:
                 type: string
               secrets:
@@ -18485,14 +18543,10 @@ spec:
                         key:
                           type: string
                         name:
-                          default: ""
                           type: string
-                        optional:
-                          type: boolean
                       required:
-                      - key
+                      - name
                       type: object
-                      x-kubernetes-map-type: atomic
                     roles:
                       items:
                         properties:
@@ -18506,7 +18560,6 @@ spec:
                         type: object
                       type: array
                   required:
-                  - db
                   - name
                   - passwordSecretRef
                   - roles

deploy/bundle.yaml

@@ -8908,6 +8908,64 @@ spec:
                   - size
                   type: object
                 type: array
+              roles:
+                items:
+                  properties:
+                    authenticationRestrictions:
+                      items:
+                        properties:
+                          clientSource:
+                            items:
+                              type: string
+                            type: array
+                          serverAddress:
+                            items:
+                              type: string
+                            type: array
+                        type: object
+                      type: array
+                    db:
+                      type: string
+                    privileges:
+                      items:
+                        properties:
+                          actions:
+                            items:
+                              type: string
+                            type: array
+                          resource:
+                            properties:
+                              cluster:
+                                type: boolean
+                              collection:
+                                type: string
+                              db:
+                                type: string
+                            type: object
+                        required:
+                        - actions
+                        type: object
+                      type: array
+                    role:
+                      type: string
+                    roles:
+                      items:
+                        properties:
+                          db:
+                            type: string
+                          role:
+                            type: string
+                        required:
+                        - db
+                        - role
+                        type: object
+                      type: array
+                  required:
+                  - db
+                  - privileges
+                  - role
+                  type: object
+                type: array
               schedulerName:
                 type: string
               secrets:
@@ -19167,14 +19225,10 @@ spec:
                         key:
                           type: string
                         name:
-                          default: ""
                           type: string
-                        optional:
-                          type: boolean
                       required:
-                      - key
+                      - name
                       type: object
-                      x-kubernetes-map-type: atomic
                     roles:
                       items:
                         properties:
@@ -19188,7 +19242,6 @@ spec:
                         type: object
                       type: array
                   required:
-                  - db
                   - name
                   - passwordSecretRef
                   - roles

deploy/cr.yaml

@@ -559,6 +559,39 @@ spec:
 #        - "host1"
 #        - "host2"
 
+#  roles:
+#    - role: myClusterwideAdmin
+#      db: admin
+#      privileges:
+#        - resource:
+#            cluster: true
+#          actions:
+#            - addShard
+#        - resource:
+#            db: config
+#            collection: ''
+#          actions:
+#            - find
+#            - update
+#            - insert
+#            - remove
+#      roles:
+#        - role: read
+#          db: admin
+#    - role: my-role
+#      db: myDb
+#      privileges:
+#        - resource:
+#            db: ''
+#            collection: ''
+#          actions:
+#            - find
+#      authenticationRestrictions:
+#        - clientSource:
+#            - 127.0.0.1
+#          serverAddress:
+#            - 127.0.0.1
+
 #  users:
 #  - name: my-user
 #    db: admin

deploy/crd.yaml

@@ -8908,6 +8908,64 @@ spec:
                   - size
                   type: object
                 type: array
+              roles:
+                items:
+                  properties:
+                    authenticationRestrictions:
+                      items:
+                        properties:
+                          clientSource:
+                            items:
+                              type: string
+                            type: array
+                          serverAddress:
+                            items:
+                              type: string
+                            type: array
+                        type: object
+                      type: array
+                    db:
+                      type: string
+                    privileges:
+                      items:
+                        properties:
+                          actions:
+                            items:
+                              type: string
+                            type: array
+                          resource:
+                            properties:
+                              cluster:
+                                type: boolean
+                              collection:
+                                type: string
+                              db:
+                                type: string
+                            type: object
+                        required:
+                        - actions
+                        type: object
+                      type: array
+                    role:
+                      type: string
+                    roles:
+                      items:
+                        properties:
+                          db:
+                            type: string
+                          role:
+                            type: string
+                        required:
+                        - db
+                        - role
+                        type: object
+                      type: array
+                  required:
+                  - db
+                  - privileges
+                  - role
+                  type: object
+                type: array
               schedulerName:
                 type: string
               secrets:
@@ -19167,14 +19225,10 @@ spec:
                         key:
                           type: string
                         name:
-                          default: ""
                           type: string
-                        optional:
-                          type: boolean
                       required:
-                      - key
+                      - name
                       type: object
-                      x-kubernetes-map-type: atomic
                     roles:
                       items:
                         properties:
@@ -19188,7 +19242,6 @@ spec:
                         type: object
                       type: array
                   required:
-                  - db
                   - name
                   - passwordSecretRef
                   - roles

deploy/cw-bundle.yaml

@@ -8908,6 +8908,64 @@ spec:
                   - size
                   type: object
                 type: array
+              roles:
+                items:
+                  properties:
+                    authenticationRestrictions:
+                      items:
+                        properties:
+                          clientSource:
+                            items:
+                              type: string
+                            type: array
+                          serverAddress:
+                            items:
+                              type: string
+                            type: array
+                        type: object
+                      type: array
+                    db:
+                      type: string
+                    privileges:
+                      items:
+                        properties:
+                          actions:
+                            items:
+                              type: string
+                            type: array
+                          resource:
+                            properties:
+                              cluster:
+                                type: boolean
+                              collection:
+                                type: string
+                              db:
+                                type: string
+                            type: object
+                        required:
+                        - actions
+                        type: object
+                      type: array
+                    role:
+                      type: string
+                    roles:
+                      items:
+                        properties:
+                          db:
+                            type: string
+                          role:
+                            type: string
+                        required:
+                        - db
+                        - role
+                        type: object
+                      type: array
+                  required:
+                  - db
+                  - privileges
+                  - role
+                  type: object
+                type: array
               schedulerName:
                 type: string
               secrets:
@@ -19167,14 +19225,10 @@ spec:
                         key:
                           type: string
                         name:
-                          default: ""
                           type: string
-                        optional:
-                          type: boolean
                       required:
-                      - key
+                      - name
                       type: object
-                      x-kubernetes-map-type: atomic
                     roles:
                       items:
                         properties:
@@ -19188,7 +19242,6 @@ spec:
                         type: object
                       type: array
                   required:
-                  - db
                   - name
                   - passwordSecretRef
                   - roles