Mirantis Container Cloud (MCC) becomes part of Mirantis OpenStack for Kubernetes (MOSK)!

Now, the MOSK documentation set covers all product layers, including MOSK management (formerly Container Cloud). This means everything you need is in one place. Some legacy names may remain in the code and documentation and will be updated in future releases. The separate Container Cloud documentation site will be retired, so please update your bookmarks for continued easy access to the latest content.

Change the password for Keycloak master user¶

This section describes how to change the password for the Keycloak master user that is used to interact with several MOSK components as well as to access the MariaDB Keycloak database.

To change the password for Keycloak master user:

Using the Keycloak admin console, change the password for the keycloak user. For details, see Change passwords for IAM users.
Log in to the MariaDB console as admin.
Use the same new value to change the MariaDB Keycloak user password:
```
SET PASSWORD FOR keycloak = PASSWORD('<new password>');
```

Restart iam-controller, user-controller, and scope-controller:

kubectl rollout restart deployment <controller_name> -n kaas:

Add the new password to the iam-api-secrets secret in the .data.keycloak_password key:

kubectl get secret iam-api-secrets -n kaas -o=jsonpath='{.data.keycloak_password}' | base64 -d

kubectl patch secret iam-api-secrets -n kaas -p '{"data":{"keycloak_password":"<new_base64-encoded_password>"}}'

Restart the Keycloak StatefulSet:

kubectl rollout restart sts iam-keycloak -n kaas