Updating the secret when the external content store password changes (Cognos Analytics)

Cognos Analytics uses the external content store password that is stored in the OpenShift® secret. Complete the following steps to update the password stored in the OpenShift secret.

Before you begin

Ensure you meet the following prerequisites:

  • You installed and provisioned the Cognos Analytics service on IBM Cloud Pak for Data.
  • You have access to a Mac OS or Linux® computer that meets the following conditions:
    • The computer can connect to the cluster.
    • The oc command is installed.
  • You can log in to the OpenShift cluster as a cluster administrator.
  • You know the name of the OpenShift project where the Cognos Analytics service is installed.

About this task

You need to know what you want the new content store password to be.

Procedure

  1. From your local client, log in to OpenShift as a cluster administrator.
    Tip: Use the Copy Login Command option in the OpenShift web console to get the oc login command.
  2. Convert the new content store password to base64.
    For example, if your new content store password is  Cognos456!, run the following command to convert the password:
    echo -n 'Cognos456!' | base64
    The result looks similar to the following output:
    Q29nbm9zNDU2IQ==
  3. Identify the secret object that is used for the content store.
    1. Run the following command to get the secrets in the OpenShift project where Cognos Analytics is deployed:
      oc get secrets -n OpenShift_Project | grep cs-creds

      Replace OpenShift_Project with the project where Cognos Analytics is deployed.

    2. Look for a secret that looks similar to the following example:
      ca1592234996446-cs-creds     Opaque     2 25h
  4. Edit the secret that you identified in the previous step.
    1. Run the following command to edit the secret:
      oc edit secret ca-cs-creds_Secret -n OpenShift_Project

      Replace ca-cs-creds_Secret with the ID of the secret from the previous step.

      Replace OpenShift_Project with the project where Cognos Analytics is deployed.

    2. In the secret object definition YAML file, update the content_store_password entry.

      Paste the base64 encoded password that you generated in a preceding step.

      For example,

      content_store_password: Q29nbm9zNDU2IQ==
  5. Restart the Cognos Analytics pods.

    Run the following shutdown.sh commands to shut down and restart the Cognos Analytics instance:

    ./shutdown.sh -t ${PROJECT_CPD_INSTANCE_TETHERED}
    ./shutdown.sh -t ${PROJECT_CPD_INSTANCE_TETHERED} -r

    For more information about creating the shutdown.sh script, see Creating administration scripts.

  6. Wait until the restart action is complete and the pods are in the Ready state.