Skip to content

CLOUDP-353164: Community/Enterprise Search TLS and cert manager changes #572

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 55 commits into from
Nov 10, 2025
Merged

CLOUDP-353164: Community/Enterprise Search TLS and cert manager changes #572

merged 55 commits into from
Nov 10, 2025

Conversation

@anandsyncs
Copy link
Contributor

@anandsyncs anandsyncs commented Nov 6, 2025 •
edited
Loading

Summary

Why: Making Search snippets with TLS-First

Our MongoDB Search snippets guide previously deployed without TLS. This PR overhauls them to be "TLS-first," adding and automating end-to-end encryption by default.

What's Changing:

  1. Integrates cert-manager to automatically install, bootstrap a self-signed CA, and issue all TLS certificates for MongoDB and MongoDBSearch.
  2. All resource manifests are updated to require and reference the new TLS secrets and CA.
  3. Replaces all hardcoded resource names, member counts, and secret names with environment variables (e.g., $RESOURCE_NAME).
  4. Adds validation scripts to check for required variables before deployment.

Proof of Work

Tests pass

Checklist

  • Have you linked a jira ticket and/or is the ticket in the title?
  • Have you checked whether your jira ticket required DOCSP changes?
  • Have you added changelog file?

fealebenpae and others added 30 commits October 13, 2025 15:09
@fealebenpae
[Search] Implement gRPC and mTLS
3ec055e
@fealebenpae
Merge remote-tracking branch 'origin/master' into fealebenpae/search-…
6593b18 
…grpc

# Conflicts:
#	controllers/searchcontroller/mongodbsearch_reconcile_helper.go
@fealebenpae
fix external tests and snippets
b791c36
@fealebenpae
try fix enterprise tests
53e9334
@fealebenpae
update unit tests for wireproto annotation
cdc55d4
@fealebenpae
bump version of mongod in external snippets
83e9b33
@fealebenpae
try fix external tests take 2
14bedcf
@fealebenpae
cheat linter
8dc3d81
@fealebenpae
remove searchCoordinator polyfill from external snippets
f4a1a34
@fealebenpae
update the port in external snippets
75c83de
@fealebenpae
remove upgrade test
83d91a0
@anandsyncs
tracer
0c6fd48
@anandsyncs
env var unification
63813e3
@anandsyncs
Merge branch 'fealebenpae/search-grpc' into anandsyncs/add-certmanage…
843fd3b 
…r-community-search-snippets
@fealebenpae
expand on the wireproto override
ab1718f
@fealebenpae
changelog
cb83dbc
@fealebenpae
Merge branch 'master' into fealebenpae/search-grpc
326ad85
@fealebenpae
rename force-wireproto annotation
aa0dc82
@anandsyncs
tracer
0b8bff0
@anandsyncs
cleanup
fcb92ca
@anandsyncs
tracer
dae55bd
@anandsyncs
cleanup
fda22ee
@anandsyncs
remove extra file
7ef1ae2
@anandsyncs
break down big snippet file
4c38389
@anandsyncs
Merge branch 'fealebenpae/search-grpc' into anandsyncs/add-certmanage…
060b7be 
…r-community-search-snippets
@anandsyncs
cleanup community
5231723
@anandsyncs
cleanup
714b2cc
@anandsyncs
address pr comments
8d95b3f
@anandsyncs
remove extraneous change
1b80dd1
@anandsyncs
use cluster issuer
86d13a7
@lsierant lsierant force-pushed the anandsyncs/mck-search-enterprise-snippets-update branch from 52a2909 to ca9d756 Compare November 7, 2025 09:00
@anandsyncs
add log fix
8e21bad
@anandsyncs
Merge remote-tracking branch 'origin/anandsyncs/mck-search-enterprise…
7902e41 
…-snippets-update' into anandsyncs/mck-search-enterprise-snippets-update

# Conflicts:
#	docs/search/01-search-community-deploy/code_snippets/01_0040_validate_env.sh
#	docs/search/01-search-community-deploy/code_snippets/01_0308_issue_tls_certificates.sh
#	docs/search/02-search-enterprise-deploy/code_snippets/02_0040_validate_env.sh
@anandsyncs anandsyncs changed the title Enterprise Search TLS and cert manager changes CLOUDP-353164: Community/Enterprise Search TLS and cert manager changes Nov 7, 2025
@anandsyncs anandsyncs added the skip-changelog Use this label in Pull Request to not require new changelog entry file label Nov 7, 2025
anandsyncs
anandsyncs commented Nov 7, 2025
View reviewed changes
@anandsyncs anandsyncs marked this pull request as ready for review November 7, 2025 12:23
@anandsyncs anandsyncs requested a review from a team as a code owner November 7, 2025 12:23
lsierant
lsierant reviewed Nov 10, 2025
View reviewed changes
anandsyncs
anandsyncs commented Nov 10, 2025
View reviewed changes
@anandsyncs anandsyncs enabled auto-merge (squash) November 10, 2025 11:27
@anandsyncs anandsyncs merged commit 73d2c40 into master Nov 10, 2025
4 of 5 checks passed
@anandsyncs anandsyncs deleted the anandsyncs/mck-search-enterprise-snippets-update branch November 10, 2025 13:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@lsierant lsierant lsierant approved these changes

@fealebenpae fealebenpae fealebenpae approved these changes

@viveksinghggits viveksinghggits Awaiting requested review from viveksinghggits viveksinghggits is a code owner automatically assigned from mongodb/kubernetes-hosted

Assignees

No one assigned

Labels

skip-changelog Use this label in Pull Request to not require new changelog entry file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

4 participants

@anandsyncs @lsierant @fealebenpae