Set up a MongoDB Atlas connector

# baton-mongodb-secrets.yaml
apiVersion: v1
kind: Secret
metadata:
  name: baton-mongodb-secrets
type: Opaque
stringData:
  # C1 credentials
  BATON_CLIENT_ID: <C1 client ID>
  BATON_CLIENT_SECRET: <C1 client secret>
  
  # MongoDB Atlas credentials
  BATON_PRIVATE_KEY: <MongoDB private key>
  BATON_PUBLIC_KEY: <MongoDB public key>

  # Optional: include if you want C1 to provision access using this connector
  BATON_PROVISIONING: true

  # Optional: include if you want invitation emails to be created for newly created user accounts
  BATON_CREATE_INVITE_KEY: true

  # Optional: include if you want to sync databases and roles
  BATON_ENABLE_SYNC_DATABASES: true
  BATON_ENABLE_MONGO_DRIVER: true

  # Optional: include if you want to delete database users that only have the read@admin role when revoking access
  BATON_DELETE_DATABASE_USER_WITH_READ_ONLY: true

# baton-mongodb.yaml
apiVersion: apps/v1
kind: Deployment
metadata:
  name: baton-mongodb
  labels:
    app: baton-mongodb
spec:
  selector:
    matchLabels:
      app: baton-mongodb
  template:
    metadata:
      labels:
        app: baton-mongodb
        baton: true
        baton-app: mongodb
    spec:
      containers:
      - name: baton-mongodb
        image: ghcr.io/conductorone/baton-mongodb:latest
        imagePullPolicy: IfNotPresent
        env:
        - name: BATON_HOST_ID
          value: baton-mongodb
        envFrom:
        - secretRef:
            name: baton-mongodb-secrets