Skip to content

Conversation

@tvdijen
Copy link
Contributor

@tvdijen tvdijen commented Oct 16, 2025

This disables legacy TLS-protocols and server-side javascript processing which is enabled by default.
Taken from CIS hardening guidelines for Mongo

This disables legacy TLS-protocols and server-side javascript processing which is enabled by default
@tvdijen
Copy link
Contributor Author

tvdijen commented Oct 16, 2025

To consider:

Add:

security:
  clusterIpSourceAllowlist:
    - 10.x.x.x/28

To restrict the clients that can communicate with the Mongo server.

@crosmuller
Copy link
Contributor

Thank you for this, I haven't had time to test and merge but will soon as possible, same for the mariadb PR

@tvdijen
Copy link
Contributor Author

tvdijen commented Nov 14, 2025

Sure @crosmuller, no worries! It's just something I'm returning to the community. All fine if you don't accept it

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants