Skip to content

Update secret rotation doc #1293

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 2 commits into from
Sep 18, 2024
Merged

Update secret rotation doc #1293

Changes from 1 commit
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
4e023a9
Add note on id of grafana_local_admin account
seunghun1ee Sep 17, 2024
e4cb368
Update grafana_admin_password section
seunghun1ee Sep 18, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
28 changes: 25 additions & 3 deletions doc/source/operations/secret-rotation.rst
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -74,7 +74,7 @@ Full method
the state of the cloud before any changes are made

2. Edit your Kolla-Ansible checkout to include changes not yet included
upstream.
upstream.

.. _kolla-change:

Expand All @@ -98,7 +98,7 @@ Full method
.. code:: bash

git fetch https://review.opendev.org/openstack/kolla-ansible refs/changes/78/903178/2 && git cherry-pick FETCH_HEAD

3. Re-install Kolla-Ansible from source in your Kolla-Ansible Python
environment

Expand Down Expand Up @@ -129,7 +129,7 @@ Full method
^redis_master_password
^memcache_secret_key
_ssh_key

private_key
public_key
^$
Expand Down Expand Up @@ -234,6 +234,28 @@ Full method

grafana-cli admin reset-admin-password --password-from-stdin

.. note::

If you see an error ``Error: ✗ could not read user from database. Error: user not found``
from Grafana CLI, it means that the ID of ``grafana_local_admin``
is not 1 (The default value used with password reset command).
You can find the ID of ``grafana_local_admin`` by accessing MariaDB.

.. code:: sql

# Enter MariaDB with
docker exec -u 0 -it mariadb bash
mysql grafana -p
# Enter database password when prompted

SELECT id,login FROM user WHERE login = "grafana_local_admin";

Once you get the ID, run the password reset with user-id option

.. code:: bash

grafana-cli admin reset-admin-password --user-id <id> --password-from-stdin

12. Update the MariaDB database password

1. Generate a new secret:
Expand Down