CouchDB password management

Changing the CouchDB password

CouchDB credentials are stored in the common ConfigMap. Two fields must be updated together: couchdb_admin_password and couchdb_connection (which embeds the password in the URL).

No manual CouchDB API command is required — the startup script automatically applies the new credentials to CouchDB when the pod restarts.

Note

Use a password that is at least 30 characters long and contains at least 3 of the following character categories: lowercase letters, uppercase letters, digits, and special characters.

1. Update the ConfigMap

Edit configmaps.yaml with the new password in both fields:

  couchdb_admin_password: "New-password1"
  couchdb_connection: "http://admin:New-password1@couchdb:5984"

2. Apply the ConfigMap

kubectl apply -f configmaps.yaml -n demo-metalsoft

3. Restart the CouchDB deployment

CouchDB must restart first so it picks up and applies the new credentials before other services attempt to reconnect.

kubectl -n demo-metalsoft rollout restart deployment couchdb
kubectl -n demo-metalsoft rollout status deployment couchdb

4. Restart affected deployments

Restart all deployments that connect to CouchDB so they pick up the updated couchdb_connection value:

cd manifests/
grep -l "couchdb_connection" *-deployment.yaml 2>/dev/null | sed 's/-deployment\.yaml//g' | while read z
do kubectl -n demo-metalsoft rollout restart deployment $z
done