How do I change the password of the MySQL users of edoc automate?

Summary

In this article, you will learn how to change the password of a MySQL user of edoc automate. There are three relevant users in this context: root, dbadmin and automate.

Important requirements

You need a Keycloak user with the admin role and sudo access via SSH to the server with edoc platform.

Solution

The passwords of the supplied MySQL users are either fixed or generated. You cannot change the password up to a certain version. If you have performed a system synchronization (SyncSystemState) after 27.02.2024, the ConfigMap resource app-server-mysql-passwords exists, which contains all passwords.

You can obtain the current passwords by entering the following command via SSH. In the command, replace the placeholder <namespace> with the corresponding namespace, e.g. master.

kubectl describe cm -n <namespace> app-server-mysql-passwords

Proceed as follows to change:

1. Open phpMyAdmin on the edoc platform server and enter the address https://<Server Name>/pma.

2. Log in with the root user. Select the corresponding edoc automate MySQL instance as the server (e.g. app-server-mysql.master).

3. Navigate to the respective user under User accounts > Select user and click on Change password.

4. Enter a new, strong password and confirm with OK.

5. Customize the ConfigMap resource in Kubernetes. Use the following command:

   kubectl edit ConfigMap -n <namespace> app-server-mysql-passwords
   

6. In the data section, change the value of the password from automate-pass or root-pass.

7. Create a new instance of the app-server-deploy pod. Use the following command:

   kubectl rollout restart deployment -n <namespace> app-server-deploy
   

You have successfully changed the password.