Docs Menu

Configure TLS/SSL for Metadata Clusters

On this page

  • Prerequisites
  • Use a TLS/SSL-Enabled Deployment without Client Certificate Validation
  • Use a TLS/SSL-Enabled Deployment with Client Certificate Validation/x.509

This document explains how to use a TLS/SSL-enabled MongoDB deployment as your Charts metadata database. This document also demonstrates connecting MongoDB Charts to a deployment using x.509 client authentication.

Note

A full description of TLS/SSL, PKI (Public Key Infrastructure) certificates, and Certificate Authority is beyond the scope of this document. This page assumes prior knowledge of TLS/SSL as well as access to valid certificates.

If you have created a Docker secret for your Charts metadata database, you must remove it prior to this procedure.

  1. If Charts is running in the Docker stack, remove it using the following command:

    docker stack rm mongodb-charts
  2. Run the following command to remove the old Docker secret:

    docker secret rm charts-mongodb-uri

You can use a TLS/SSL-enabled MongoDB deployment as your metadata database. If the deployment is running with TLS/SSL enabled, configuring your metadata database depends on whether the deployment's certificate is:

  • Signed by a trusted root certificate authority, or
  • Self-signed or issued by an internal certificate authority.
Note

MongoDB deployments should use TLS/SSL 1.1 or later.

Select the appropriate tab based on how the deployment's certificate is signed:

Use this procedure to if the MongoDB deployment you wish to use for your metadata database requires Client Certificate Validation.

The process to configure your metadata database depends on whether the deployment's certificate is:

  • Signed by a trusted root certificate authority, or
  • Self-signed or issued by an internal certificate authority.
Note

MongoDB deployments should use TLS/SSL 1.1 or later.

Select the appropriate tab based on how the deployment's certificate is signed:

Give Feedback
© 2021 MongoDB, Inc.

About

  • Careers
  • Legal Notices
  • Privacy Notices
  • Security Information
  • Trust Center
© 2021 MongoDB, Inc.