Page Comparison

...

Changing the database password is not totally unlike an upgrade of of Image Added. It requires you to stop the platform and batch workflows, changing the password and then upgrading the helm charts.

1. Make sure all ECs are disconnected.
   

   Code Block
   theme Eclipse
   mzcli mzadmin/<password> disconnect <ec name> ...

   
   

2. To change the database password the platform must be stopped. We do this by setting replicas to 0.
   

   Code Block
   theme Eclipse
   kubectl scale --replicas=0 statefulset/platform

   Verify that the platform pod have stopped by checking that there is no platform appearing after the command below.

   Code Block
   theme Eclipse
   kubectl get pods

   
   

3. Modify the password in the database. Update the Oracle, PostgreSQL or SAP HANA passwords to correspond to the ones you set in the next step.
   
   

4. Upgrade the the Image Added helm chart either by editing the kubernetes env-secrets or by passing the arguments with helm.

   Env-secrets approach:
   Refer to Bootstrapping System Certificates and Secrets - Private Cloud(3.0) if you opt for editing the kubernetes env-secrets. When done, continue with step 5.

   Code Block
   theme Eclipse
   kubectl edit secret env-secrets

   
   

   Note
   title Note
   The password must be entered in base64 encoded format

   Helm approach:
   If you choose to pass arguments with helm then you need to make sure that you also pass any arguments you passed in when Image Added was installed. The example below we have installed the Image Added chart as "mz-chart" from the path "mz-path".
   

   Code Block
   theme Eclipse
   helm upgrade --install mz-chart mz-path --set=platform.db.jdbcPassword=mynewpassword

   
   

5. Increase the replica count again.

   Code Block
   theme Eclipse
   kubectl scale --replicas=1 statefulset/platform

   
   

6. Once the platform have restarted a new password will be set. If the platform pod is ready you have verified that the password works.

   Code Block
   theme Eclipse
   kubectl get pod platform-0