Access Verrazzano

Information and tools to support operating Verrazzano

Get the consoles URLs

Verrazzano installs several consoles. The endpoints for an installation are stored in the Status field of the installed Verrazzano Custom Resource.

You can access the installation endpoints using the Verrazzano CLI or with kubectl. See the following respective sections.

Get consoles credentials

You will need the credentials to access the consoles installed by Verrazzano.

Consoles accessed by the same user name

  • Grafana
  • Prometheus
  • OpenSearch Dashboards
  • OpenSearch
  • Kiali
  • Jaeger

User: verrazzano

To get the password:

$ kubectl get secret \
    --namespace verrazzano-system verrazzano \
    -o jsonpath={.data.password} | base64 \
    --decode; echo

The Keycloak admin console

User: keycloakadmin

To get the password:

$ kubectl get secret \
    --namespace keycloak keycloak-http \
    -o jsonpath={.data.password} | base64 \
    --decode; echo

The Rancher console

You can log in to the Rancher console using the verrazzano user configured in Keycloak or with the local admin user for Rancher. To log in with Keycloak, select the Log in with Keycloak link or select the Use a local user link to log in with the local user.

Local Admin User: admin

To get the password:

$ kubectl get secret \
    --namespace cattle-system rancher-admin-secret \
    -o jsonpath={.data.password} | base64 \
    --decode; echo

Keycloak User: verrazzano

To get the password:

$ kubectl get secret \
    --namespace verrazzano-system verrazzano \
    -o jsonpath={.data.password} | base64 \
    --decode; echo

Change the Verrazzano password

To change the Verrazzano password, first change the user password in Keycloak and then update the Verrazzano secret.

Change the user in Keycloak

  1. Navigate to the Keycloak admin console.

    a. Obtaining the Keycloak admin console URL is described here.

    b. Obtaining the Keycloak admin console credentials is described here.

  2. In the left pane, under Manage, select Users.

  3. In the Users pane, search for verrazzano or click View all users.

  4. For the verrazzano user, click the Edit action.

  5. At the top, select the Credentials tab.

  6. Specify the new password and confirm.

  7. Specify whether the new password is a temporary password. A temporary password must be reset on next login.

  8. Click Reset Password.

  9. Confirm the password reset by clicking Reset password in the confirmation dialog.

Update the Verrazzano secret

Get the base64 encoding for your new password.

$ echo -n 'MyNewPwd' | base64

Update the password in the secret.

$ kubectl edit secret verrazzano -n verrazzano-system

Replace the existing password value with the new base64 encoded value.