Change the password for Keycloak master user¶

This section describes how to change the password for the Keycloak master user that is used to interact with several MOSK components as well as to access the MariaDB Keycloak database.

To change the password for Keycloak master user:

Using the Keycloak admin console, change the password for the keycloak user. For details, see Change passwords for IAM users.
Log in to the MariaDB console as admin.
Use the same new value to change the MariaDB Keycloak user password:
```
SET PASSWORD FOR keycloak = PASSWORD('<new password>');
```

Restart iam-controller, user-controller, and scope-controller:

kubectl rollout restart deployment <controller_name> -n kaas:

Add the new password to the iam-api-secrets secret in the .data.keycloak_password key:

kubectl get secret iam-api-secrets -n kaas -o=jsonpath='{.data.keycloak_password}' | base64 -d

kubectl patch secret iam-api-secrets -n kaas -p '{"data":{"keycloak_password":"<new_base64-encoded_password>"}}'

Restart the Keycloak StatefulSet:

kubectl rollout restart sts iam-keycloak -n kaas

No results

An error occurred

Change the password for Keycloak master user¶