From 5334512cef5963b585351ceee434116ea7d9483f Mon Sep 17 00:00:00 2001 From: Rachel Elledge Date: Wed, 29 Oct 2025 16:55:16 -0500 Subject: [PATCH 1/3] DOC-5620 Add detailed instructions to update Active-Active DB admin credentials --- .../active-active-admin-credentials.md | 38 +++++++++++++++++-- 1 file changed, 35 insertions(+), 3 deletions(-) diff --git a/content/operate/rs/security/access-control/manage-passwords/active-active-admin-credentials.md b/content/operate/rs/security/access-control/manage-passwords/active-active-admin-credentials.md index a65a5fd972..fc36afaa95 100644 --- a/content/operate/rs/security/access-control/manage-passwords/active-active-admin-credentials.md +++ b/content/operate/rs/security/access-control/manage-passwords/active-active-admin-credentials.md @@ -10,13 +10,45 @@ linkTitle: Update Active-Active admin credentials weight: 90 --- -Active-Active databases use administrator credentials to manage operations. +Active-Active databases use administrator credentials to manage operations. When you change the administrator password on clusters with Active-Active databases, you must update the Active-Active database configuration to prevent authentication failures during Active-Active operations and synchronization. -To update the administrator user password on a cluster with Active-Active databases: +To update the administrator password on a cluster with Active-Active databases: 1. From the user management page, update the administrator user password on the clusters you want to update. -1. For each participating cluster _and_ each Active-Active database, update the admin user credentials to match the changes in step 1. +1. Run `crdb-cli crdb list` to find the `CRDB-GUID` that uniquely identifies each Active-Active database and the fully qualified domain names (`FQDN`) of each participating cluster: + + ```sh + crdb-cli crdb list + ``` + + Example output: + + ```sh + CRDB-GUID NAME REPL-ID FQDN + 4053a0dd-a4a5-4f38-b135-75b7a2dc7331 my-aa-db 1 fqdn1.example.com + 4053a0dd-a4a5-4f38-b135-75b7a2dc7331 my-aa-db 2 fqdn2.example.com + ``` + +1. Update the Active-Active database credentials using the [`crdb-cli crdb update`]({{< relref "/operate/rs/references/cli-utilities/crdb-cli/crdb/update" >}}) command: + + ```sh + crdb-cli crdb update \ + --crdb-guid \ + --credentials id=,username=,password= \ + --credentials id=,username=,password= \ + --force + ``` + + Replace the following values: + + - ``: The `CRDB-GUID` from the `crdb-cli crdb list` output + + - ``: The administrator username for the clusters + + - `` and `REPL-ID-2`: The `REPL-ID` for the corresponding FQDNs + + - `` and ``: The current admin passwords for each cluster {{}} Do not perform any management operations on the databases until these steps are complete. From 48cb237fb593f0fedb8e6382d044c8c2c6be12a5 Mon Sep 17 00:00:00 2001 From: Rachel Elledge Date: Mon, 3 Nov 2025 15:01:22 -0600 Subject: [PATCH 2/3] DOC-5620 Feedback updates for intro wording and moved warning to the top of the page --- .../active-active-admin-credentials.md | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/content/operate/rs/security/access-control/manage-passwords/active-active-admin-credentials.md b/content/operate/rs/security/access-control/manage-passwords/active-active-admin-credentials.md index fc36afaa95..3f7efcc5d0 100644 --- a/content/operate/rs/security/access-control/manage-passwords/active-active-admin-credentials.md +++ b/content/operate/rs/security/access-control/manage-passwords/active-active-admin-credentials.md @@ -10,7 +10,11 @@ linkTitle: Update Active-Active admin credentials weight: 90 --- -Active-Active databases use administrator credentials to manage operations. When you change the administrator password on clusters with Active-Active databases, you must update the Active-Active database configuration to prevent authentication failures during Active-Active operations and synchronization. +Active-Active databases use administrator credentials to manage operations. When you change the administrator password on clusters with Active-Active databases, you must update the Active-Active database configuration to prevent authentication failures during Active-Active management operations. + +{{}} +Do not perform any management operations on the databases until these steps are complete. +{{}} To update the administrator password on a cluster with Active-Active databases: @@ -49,7 +53,3 @@ To update the administrator password on a cluster with Active-Active databases: - `` and `REPL-ID-2`: The `REPL-ID` for the corresponding FQDNs - `` and ``: The current admin passwords for each cluster - -{{}} -Do not perform any management operations on the databases until these steps are complete. -{{}} From f7345a21bf8d2d3d571b9b912730c90a128b34ef Mon Sep 17 00:00:00 2001 From: Rachel Elledge Date: Mon, 3 Nov 2025 15:44:24 -0600 Subject: [PATCH 3/3] DOC-5620 Added link to crdb-cli reference and small copy edits for consistency --- .../manage-passwords/active-active-admin-credentials.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/content/operate/rs/security/access-control/manage-passwords/active-active-admin-credentials.md b/content/operate/rs/security/access-control/manage-passwords/active-active-admin-credentials.md index 3f7efcc5d0..7977e1d023 100644 --- a/content/operate/rs/security/access-control/manage-passwords/active-active-admin-credentials.md +++ b/content/operate/rs/security/access-control/manage-passwords/active-active-admin-credentials.md @@ -20,7 +20,7 @@ To update the administrator password on a cluster with Active-Active databases: 1. From the user management page, update the administrator user password on the clusters you want to update. -1. Run `crdb-cli crdb list` to find the `CRDB-GUID` that uniquely identifies each Active-Active database and the fully qualified domain names (`FQDN`) of each participating cluster: +1. Run [`crdb-cli crdb list`]({{}}) to find the `CRDB-GUID` that uniquely identifies each Active-Active database and the fully qualified domain names (`FQDN`) of each participating cluster: ```sh crdb-cli crdb list @@ -48,8 +48,8 @@ To update the administrator password on a cluster with Active-Active databases: - ``: The `CRDB-GUID` from the `crdb-cli crdb list` output - - ``: The administrator username for the clusters + - ``: The administrator username for the clusters - - `` and `REPL-ID-2`: The `REPL-ID` for the corresponding FQDNs + - `` and ``: The `REPL-ID` for the corresponding FQDNs - - `` and ``: The current admin passwords for each cluster + - `` and ``: The current administrator passwords for each cluster