Access Verrazzano
Get the consoles URLs
Verrazzano installs several consoles. The endpoints for an installation are stored in the Status
field of the
installed Verrazzano Custom Resource.
You can access the installation endpoints using the Verrazzano CLI or with kubectl. See the following respective sections.
Get consoles credentials
You will need the credentials to access the consoles installed by Verrazzano.
Consoles accessed by the same user name
- Grafana
- Prometheus
- OpenSearch Dashboards
- OpenSearch
- Kiali
- Jaeger
User: verrazzano
To get the password:
$ kubectl get secret \
--namespace verrazzano-system verrazzano \
-o jsonpath={.data.password} | base64 \
--decode; echo
The Keycloak admin console
User: keycloakadmin
To get the password:
$ kubectl get secret \
--namespace keycloak keycloak-http \
-o jsonpath={.data.password} | base64 \
--decode; echo
The Rancher console
You can log in to the Rancher console using the verrazzano
user configured in Keycloak or with the local admin
user for Rancher.
To log in with Keycloak, select the Log in with Keycloak
link or select the Use a local user
link to log in with the local user.
Local Admin User: admin
To get the password:
$ kubectl get secret \
--namespace cattle-system rancher-admin-secret \
-o jsonpath={.data.password} | base64 \
--decode; echo
Keycloak User: verrazzano
To get the password:
$ kubectl get secret \
--namespace verrazzano-system verrazzano \
-o jsonpath={.data.password} | base64 \
--decode; echo
Change the Verrazzano password
To change the Verrazzano password, first change the user password in Keycloak and then update the Verrazzano secret.
Change the user in Keycloak
-
Navigate to the Keycloak admin console.
a. Obtaining the Keycloak admin console URL is described here.
b. Obtaining the Keycloak admin console credentials is described here.
-
In the left pane, under
Manage
, selectUsers
. -
In the
Users
pane, search forverrazzano
or clickView all users
. -
For the
verrazzano
user, click theEdit
action. -
At the top, select the
Credentials
tab. -
Specify the new password and confirm.
-
Specify whether the new password is a temporary password. A temporary password must be reset on next login.
-
Click
Reset Password
. -
Confirm the password reset by clicking
Reset password
in the confirmation dialog.
Update the Verrazzano secret
Get the base64 encoding for your new password.
$ echo -n 'MyNewPwd' | base64
Update the password in the secret.
$ kubectl edit secret verrazzano -n verrazzano-system
Replace the existing password value with the new base64 encoded value.
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.