(DOCSP-11904): LDAP agent configuration is missing ldapGroupDN field

Author: jwilliams-mongo

source/includes/options-k8s-replica-set.yaml

@@ -436,6 +436,13 @@ inherit:
   file: options-k8s-shared.yaml
 ---
 program: k8sRsConf
+name: spec.security.authentication.ldap.automationLdapGroupDN
+inherit:
+  name: spec.security.authentication.ldap.automationLdapGroupDN
+  program: _shared
+  file: options-k8s-shared.yaml
+---
+program: k8sRsConf
 name: spec.security.authentication.ldap.userToDNMapping
 inherit:
   name: spec.security.authentication.ldap.userToDNMapping

source/includes/options-k8s-shared.yaml

@@ -716,6 +716,23 @@ description: |
   .. seealso:: :manual:`LDAP Query Templates </core/security-ldap-external/#ldap-query-template>` in the MongoDB Manual
 ---
 program: _shared
+name: spec.security.authentication.ldap.automationLdapGroupDN
+type: string
+directive: setting
+description: |
+
+  The Distinguished Name (DN) of the LDAP group to which the
+  {+mdbagent+} user belongs.
+  
+  This setting is required if:
+
+  - :setting:`spec.security.authentication.ldap.authzQueryTemplate` is
+    present, and
+  - :setting:`spec.security.authentication.agents.mode` is ``LDAP`` or
+    ``X509``.
+
+---
+program: _shared
 name: spec.security.authentication.ldap.userToDNMapping
 type: string
 directive: setting

source/reference/k8s-operator-specification.txt

@@ -226,6 +226,7 @@ cluster resource types:
 .. include:: /includes/option/setting-k8sRsConf-spec.security.authentication.ldap.bindQueryPasswordSecretRef.rst
 .. include:: /includes/option/setting-k8sRsConf-spec.security.authentication.ldap.bindQueryPasswordSecretRef.name.rst
 .. include:: /includes/option/setting-k8sRsConf-spec.security.authentication.ldap.authzQueryTemplate.rst
+.. include:: /includes/option/setting-k8sRsConf-spec.security.authentication.ldap.automationLdapGroupDN.rst
 .. include:: /includes/option/setting-k8sRsConf-spec.security.authentication.ldap.userToDNMapping.rst
 .. include:: /includes/option/setting-k8sRsConf-spec.security.authentication.agents.rst
 .. include:: /includes/option/setting-k8sRsConf-spec.security.authentication.agents.mode.rst