ERROR: FATAL: password authentication failed for user "bn_keycloak"

Camunda 8 Topics
1

Hello everyone,

I’m facing this issue in pod KeyCloak. I tried delete stateful and re-deploy but still facing this issue.

2

Hi @touch.teng
You might need to delete the related PVC also, and then redeploy.

Regards,
Alex

3

Hello @Alex_Voloshyn ,

You mean delete postgresql and re-deploy both KeyCloak and Postgresql?

is there other way to fix it in configuration?

Thanks,
Teng

4

Most likely, a redeployment or uninstall occurred, which caused a new Keycloak password to be generated, while the original one is still stored in Postgres (PVC). In this case, you need to clean up the initial credentials.

I don’t think there’s an easy way to fix this without updating the values in the database. However, if it’s a lower environment, I would just redeploy everything, including removing the PVCs.

Regards,
Alex

1 Like
5

Hi @Alex_Voloshyn ,
Can we configure fix password for KeyCloak in Value.yaml file?
It won’t cause the error next time.

Regards,
Teng

6

Yes, you surely can. Here is an example:

identityKeycloak:
  enabled: true
  auth:
    adminUser: "admin"
    adminPassword: "admin"

OR

identityKeycloak:
  enabled: true
  auth:
    adminUser: "admin"
    existingSecret: keycloak-secret
    passwordSecretKey: "admin-password"
7

Hi @Alex_Voloshyn ,

Appreciated your help. I have one more question, we just apply this configure then all components will follow this static username and password?

Regards,
Teng

8

we just apply this configure then all components will follow this static username and password

No, it’s on admin credentials for the Keycloak component

If you want to configure secrets for all the components, you also need to configure it. Here is an example Camunda 8 Helm installation | Camunda 8 Docs

The documentation is slightly outdated, but it gives you a general idea — credentials and secrets are configured per component.

If this answers your question(s), you might want to mark one of the replies as a solution so the community knows the question was answered.
Regards,
Alex

9

This topic was automatically closed 7 days after the last reply. New replies are no longer allowed.