Charmed PostgreSQL VM
- By Canonical Data Platform
- Databases
Channel | Revision | Published | Runs on |
---|---|---|---|
latest/stable | 345 | 09 Nov 2023 | |
14/stable | 363 | 21 Feb 2024 | |
14/candidate | 363 | 31 Jan 2024 | |
14/beta | 368 | 21 Feb 2024 | |
14/edge | 396 | 16 Apr 2024 |
juju deploy postgresql --channel 14/stable
Deploy universal operators easily with Juju, the Universal Operator Lifecycle Manager.
Platform:
Manage passwords
When we accessed PostgreSQL earlier in this tutorial, we needed to use a password manually. Passwords help to secure our database and are essential for security. Over time, it is a good practice to change the password frequently.
In this section, we will go through setting and changing the password for the admin user.
This is part of the Charmed PostgreSQL VM Tutorial.
Please refer to the Overview for more information.
Retrieve the password
The operator’s password can be retrieved by running the get-password
action on the Charmed PostgreSQL VM application:
juju run postgresql/leader get-password
Running the command should output:
unit-postgresql-0:
UnitId: postgresql/0
id: "14"
results:
operator-password: eItxBiOYeMf7seSv
status: completed
timing:
completed: 2023-03-20 09:17:51 +0000 UTC
enqueued: 2023-03-20 09:17:49 +0000 UTC
started: 2023-03-20 09:17:50 +0000 UTC
Rotate the password
You can change the operator’s password to a new random password by entering:
juju run postgresql/leader set-password
Running the command should output:
unit-postgresql-0:
UnitId: postgresql/0
id: "16"
results:
operator-password: npGdNGNGVtu7SO50
status: completed
timing:
completed: 2023-03-20 09:18:11 +0000 UTC
enqueued: 2023-03-20 09:18:08 +0000 UTC
started: 2023-03-20 09:18:10 +0000 UTC
The status: completed
element in the output above indicates that the password has been successfully updated. The new password should be different from the previous password.
Set the new password
You can set a new password manually by entering
juju run postgresql/leader set-password password=my-password
where my-password
is your password of choice.
Running the command should output:
unit-postgresql-0:
UnitId: postgresql/0
id: "18"
results:
operator-password: my-password
status: completed
timing:
completed: 2023-03-20 09:20:06 +0000 UTC
enqueued: 2023-03-20 09:20:04 +0000 UTC
started: 2023-03-20 09:20:05 +0000 UTC
Set the new password for the specific user
You can change the password for a specific user by running
juju run postgresql/leader set-password username=my-user password=my-password
Read more about internal operator users here.