How do I change internal user account names and passwords?
Purpose
For enhanced security, NSP allows reconfiguration of internal account user names and passwords. NSP uses a number of internal accounts for its applications. User names and passwords for these accounts are held in Kubernetes secrets and cannot be managed through the NSP GUI.
When an NSP system is installed and the Kubernetes secrets are created, those secrets receive randomized user names and passwords, or specific values as defined by the administrator. After installation, you can regenerate or reconfigure the secrets as needed.
When an NSP system is upgraded from an earlier release, the existing Kubernetes secrets are retained. When the secret install runs during the upgrade process, only missing secrets are generated. You may choose to update any secrets at upgrade time or after the upgrade, as desired. The internal account user names and password can be changed by updating the Kubernetes secret associated with that internal account.
NSP uses the following Kubernetes secrets that contain internal user name and password information:
| WARNING Internal communication disruption |
Changing an internal account kubernetes secret could disrupt communications within an NSP deployment.
Steps
1 |
Open a terminal session to the NSP deployer VM. |
2 |
Log in as the root or NSP admin user. |
3 |
The following command modifies an internal account secret. You can select a kubernetes secret from the list above. Enter the following: # cd /opt/nsp/NSP-CN-DEP-release-ID/bin ↵ # ./nspdeployerctl secret -n nsp-psa-restricted -s <secret> -v <username attribute>=<new username> -p <password attribute>=<new password> update ↵ where <secret> is the name of the kubernetes secret being modified <username attribute> is user name attribute in the secret <new username> is the new user name for the secret <password attribute> is the password attribute in the secret <new password> is the new password for the secret End of steps |