Skip to content

Commit e1c096a

Browse files
authored
(DOCS-14261) Correct k8s secret name for agents (#521)
* (DOCS-14261) Correct k8s secret name for agents
1 parent 96fa02c commit e1c096a

File tree

1 file changed

+13
-5
lines changed

1 file changed

+13
-5
lines changed

source/includes/options-k8s-shared.yaml

Lines changed: 13 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -1114,17 +1114,25 @@ description: |
11141114
11151115
Specifies the |k8s-secret| that contains the {+mdbagent+}'s
11161116
|tls| certificate.
1117+
1118+
This secret must contain the following keys, the
1119+
values of which are |tls| certificates that can be validated by the
1120+
server:
11171121
1122+
- ``mms-automation-agent-pem``
1123+
- ``mms-backup-agent-pem``
1124+
- ``mms-monitoring-agent-pem``
1125+
11181126
You must create this secret in the same namespace to which you
11191127
deploy the |k8s-op-short|:
11201128
11211129
.. code-block:: sh
11221130
1123-
kubectl create secret generic agent-cert \
1124-
--from-file=mms-automation-agent-pem=agent-cert.pem -n <namespace>
1125-
1126-
This secret must contain a ``mms-automation-agent-pem`` key, the value
1127-
of which is a |tls| certificate that can be validated by the server.
1131+
kubectl create secret generic agent-certs \
1132+
--from-file=mms-automation-agent-pem=<automation-cert.pem> \
1133+
--from-file=mms-backup-agent-pem=<backup-cert.pem> \
1134+
--from-file=mms-monitoring-agent-pem=<monitoring-cert.pem> \
1135+
-n <namespace>
11281136
11291137
This setting is required if
11301138
:setting:`spec.security.authentication.requireClientTLSAuthentication` is ``true``.

0 commit comments

Comments
 (0)