Create a superadmin User

As the superadmin user does not have these restrictions, it should only be used for specific operations, such as initiating disaster recovery (DR) replication or creating a database with unlimited storage. Using the superadmin user to perform unprescribed operations (such as adding and removing leaves and/or changing engine variables, etc.) can trigger unexpected Pod cycling by the Operator and/or adversely impact the Operator's state.

In addition, as the Operator uses the root user to manage the cluster and the root user’s password, the Operator's root password must never be changed. Changing the root user’s password will decouple the Operator from the SingleStore cluster and neither the Operator nor the cluster will continue to function as intended.

Obtain the Root Password

The root user has all privileges, including those to create users and manage the cluster. This user is assigned a password when the SingleStore cluster is first created. The Operator creates a corresponding secret with the same name as the SingleStore cluster which is used to store the root user’s password.

To obtain this secret, run the following command.

Shell

kubectl get secrets

Note that, in this secret, the password is Base64-encoded. To decode the password from the secret, run the following command.

Shell

echo <ENCODED-VALUE> | base64 -D

Create the superadmin User

As noted earlier, while the root user’s password can be viewed, it must never be changed.

Should you need to use the root user, SingleStore recommends that you:

As the root user, create a superadmin user via the following SQL command.
SQL
```
CREATE USER 'superadmin'@'%' IDENTIFIED BY '<secure-password>'
```
Grant the superadmin user root privileges via the following SQL command.
SQL
```
GRANT ALL ON *.* TO 'superadmin'@'%' WITH GRANT OPTION;
```

Once this superadmin user has been created, obtaining the root user’s password is no longer necessary.

Create a superadmin User

On this page

Obtain the Root Password

Create the superadmin User

Was this article helpful?

On this page

Was this article helpful?