Specify and Rotate the Root Password

Specify a Root Password

To specify a root password:

1. Create a Secret.

   Shell

   Copy

   kubectl create secret generic rootpw --from-literal=password='<desired-root-password>'

2. Add the following field to the MemsqlCluster spec (sdb-cluster.yaml file) to reference this Secret with a key selector.

   YAML

   Copy

   rootPasswordSecret:
     key: password
     name: rootpw

Rotate the Root Password

To rotate the root password, change the Secret value. For example:

kubectl patch secret rootpw --patch="{\"data\": { \"password\": \"$(echo -n 'newrootpassword123' | base64 -w0)\" }}"

Once updated, the root password will rotate in the background based on the Kubernetes sync period. Refer to Using Secrets as files from a Pod for more information.