There are two postgresql databases kfuse-configdb and orchestrator-postgresql that Kloudfuse installation uses and both are using the default password obtained from kfuse-pg-credentials secret.
If you wish to update the default password for postgresql, it can be updated with following steps
Get the default password with following steps
kubectl -n kfuse get secret kfuse-pg-credentials -o yaml apiVersion: v1 data: postgres-password: <<default password base64 encoded>> postgresql-password: <<default password base64 encoded>> postgresql-postgres-password: <<default password base64 encoded>> postgresql-replication-password: <<default password base64 encoded>> kind: Secret metadata: . . .
Decrypt the default password
echo -n <<default password base64 encoded>> | base64 -d # Ignore the end character %
Login to
kfuse-configdband change the default postgres password
kubectl -n kfuse exec -it kfuse-configdb-0 -- bash I have no name!@kfuse-configdb-0:/$ psql -U postgres Password for user postgres: psql (14.11) Type "help" for help. postgres=# \password postgres Enter new password for user "postgres": Enter it again: postgres=# exit
Login to
orchestrator-postgresqland change the default postgres password
kubectl -n kfuse exec -it orchestrator-postgresql-0 -- bash I have no name!@orchestrator-postgresql-0:/$ psql -U postgres Password for user postgres: psql (14.11) Type "help" for help. postgres=# \password postgres Enter new password for user "postgres": Enter it again: postgres=# exit
Base64 Encode the new password
echo -n "<<new password>>" | base64
Edit the existing
kfuse-pg-credentialssecret and update with new base64 encoded password
kubectl -n kfuse edit secrets kfuse-pg-credentials
Restart the dependent services to update with the new password
kubectl -n kfuse rollout restart statefulset kfuse-configdb orchestrator-postgresql logs-query-service kubectl -n kfuse rollout restart deployment advance-functions-service events-query-service ingester kfuse-grafana query-service trace-query-service