Information and tools to support operating Verrazzano

Get the consoles URLs

Verrazzano installs several consoles. Get the ingress for the consoles with the following command:

$ kubectl get ingress -A

To get the URL, prefix https:// to the host name returned. For example, https://rancher.myenv.mydomain.com.

The following is an example of the ingresses:

   NAMESPACE           NAME                               HOSTS                                          ADDRESS          PORTS     AGE
   cattle-system       rancher                            rancher.myenv.mydomain.com              80, 443   93m
   keycloak            keycloak                           keycloak.myenv.mydomain.com             80, 443   69m
   verrazzano-system   verrazzano-operator-ingress        api.myenv.mydomain.com                  80, 443   81m
   verrazzano-system   vmi-system-api                     api.vmi.system.myenv.mydomain.com       80, 443   80m
   verrazzano-system   vmi-system-es-ingest               elasticsearch.vmi.system.myenv.mydomain.com   80, 443   80m
   verrazzano-system   vmi-system-grafana                 grafana.vmi.system.myenv.mydomain.com   80, 443   80m
   verrazzano-system   vmi-system-kibana                  kibana.vmi.system.myenv.mydomain.com    80, 443   80m
   verrazzano-system   vmi-system-prometheus              prometheus.vmi.system.myenv.mydomain.com   80, 443   80m
   verrazzano-system   vmi-system-prometheus-gw           prometheus-gw.vmi.system.myenv.mydomain.com   80, 443   80m

Get console credentials

You will need the credentials to access the consoles installed by Verrazzano.

Consoles accessed by the same user name/password

  • Grafana
  • Prometheus
  • Kibana
  • Elasticsearch

User: verrazzano

To get the password:

$ kubectl get secret --namespace verrazzano-system verrazzano -o jsonpath={.data.password} | base64 --decode; echo

The Keycloak admin console

User: keycloakadmin

To get the password:

$ kubectl get secret --namespace keycloak keycloak-http -o jsonpath={.data.password} | base64 --decode; echo

The Rancher console

User: admin

To get the password:

$ kubectl get secret --namespace cattle-system rancher-admin-secret -o jsonpath={.data.password} | base64 --decode; echo

Change the Verrazzano password

To change the Verrazzano password, first change the user password in Keycloak and then update the Verrazzano secret.

Change the user in Keycloak

  1. Navigate to the Keycloak admin console. Obtaining the Keycloak admin console URL is described here. Obtaining the Keycloak admin console credentials is described here.
  2. In the left pane, under Manage, select Users.
  3. In the Users pane, search for verrazzano or click View all users.
  4. For the verrazzano user, click the Edit action.
  5. At the top, select the Credentials tab.
  6. Specify the new password and confirm.
  7. Specify whether the new password is a temporary password. A temporary password must be reset on next login.
  8. Click Reset Password.
  9. Confirm the password reset by clicking Reset password in the confirmation dialog.

Update the Verrazzano secret

Get the base64 encoding for your new password:

$ echo -n 'MyNewPwd' | base64

Update the password in the secret:

$ kubectl edit secret verrazzano -n verrazzano-system

Replace the existing password value with the new base64 encoded value.