Update postgresql default password

There are two postgresql databases kfuse-configdb and orchestrator-postgresql that Kloudfuse installation uses and both are using the default password obtained from kfuse-pg-credentials secret.

If you wish to update the default password for postgresql, it can be updated with following steps

Get the default password with following steps

kubectl -n kfuse get secret kfuse-pg-credentials -o yaml 

apiVersion: v1
data:
  postgres-password: <<default password base64 encoded>>
  postgresql-password: <<default password base64 encoded>>
  postgresql-postgres-password: <<default password base64 encoded>>
  postgresql-replication-password: <<default password base64 encoded>>
kind: Secret
metadata:
.
.
.

Decrypt the default password

echo -n <<default password base64 encoded>> | base64 -d 
# Ignore the end character %

Login to kfuse-configdb and change the default postgres password

kubectl -n kfuse exec -it kfuse-configdb-0 -- bash
I have no name!@kfuse-configdb-0:/$ psql -U postgres
Password for user postgres:
psql (14.11)
Type "help" for help.

postgres=# \password postgres
Enter new password for user "postgres":
Enter it again:
postgres=# exit

Login to orchestrator-postgresql and change the default postgres password

Base64 Encode the new password

Edit the existing kfuse-pg-credentials secret and update with new base64 encoded password

Restart the dependent services to update with the new password

External

Update postgresql default password

Analytics

Related content