Change passwords for IAM users¶
This section describes how to change passwords for IAM users on publicly accessible Mirantis Container Cloud deployments using the Keycloak web UI.
To change the IAM passwords:
Obtain the Keycloak admin password:
kubectl get secret -n kaas iam-api-secrets -o jsonpath='{.data.keycloak_password}' | base64 -d ; echo
Obtain the Keycloak load balancer IP:
kubectl get svc -n kaas iam-keycloak-http
Log in to the Keycloak web UI using the following link form with the default
keycloak
admin user and the Keycloak credentials obtained in the previous steps:https://<Keycloak-LB-IP>/auth/admin/master/console/#/realms/iam/users
In the Manage > Users menu, select the required user.
Open Credentials tab.
Using the Reset password form, update the password as required.
Note
To change the password permanently, toggle the Temporary switch to the OFF position. Otherwise, the user will be prompted to change the password after the next login.
See also