Charm does not support setting username/password when relating to mongodb

[Mario Splivalo]

Currently Ceilometer charm relates to mongodb without setting special user inside mongodb. Moreover, one can not set username/password for connecting to mongodb.

This is partially mongodb charm issue as it creates mongodb service which is world accessible. Still, ceilometer charm should create user in mongodb and then create ceilometer database accessible only by that user.

Edit: This is exactly the same situation for Graylog charm.

[Alvaro Uria (aluria)]

We've hit this bug, too. We want to give read-only access to mongodb so that users can backup or access the collected data directly. However, ceilometer itself accesses the DB without authentication.

Related links:
https://github.com/openstack/charm-ceilometer/blob/master/lib/ceilometer_contexts.py#L46
https://github.com/openstack/charm-ceilometer/blob/master/templates/ocata/ceilometer.conf#L43
https://docs.openstack.org/mitaka/install-guide-ubuntu/ceilometer-install.html
https://docs.openstack.org/mitaka/config-reference/telemetry/telemetry-config-options.html

MongoDB links (v3.6 and v2.4):
https://docs.mongodb.com/manual/administration/configuration/#security-considerations
https://docs.mongodb.com/v2.4/administration/configuration/#security-considerations

[Xav Paice (xavpaice)]

I've marked this as new for Ceilometer, and added Graylog because that's affected the same way.

For ceilometer, from Queens onward, this is no longer relevant as we don't use Mongo (gnocchi instead), but we need to make a clear choice about whether we want to fix this for older versions or mark as wontfix.

[Robert Gildein (rgildein)]

The `auth` and `bind_ip` configuration options are
already in charm-mongodb, but they do not work properly.
That's why I reported these two bugs [1] and [2].

However we will not fix them, because charm-mongodb is
deprecated. Instead, we'll use the new mongodb-operator
charm and add the necessary functionality there.

---
[1]: https://bugs.launchpad.net/charm-mongodb/+bug/1995492
[2]: https://bugs.launchpad.net/charm-mongodb/+bug/1995493