shc system keycloak reset-admin-password

reset the system keycloak admin password

Synopsis

Reset the system Keycloak’s admin password: the live credential is reset through the admin API, the recorded seed (vault row + the system.apps.keycloak.vars.adminPassword config override, when set) is updated to match, and the keycloak stack is redeployed so the container environment converges. Without —password a new password is autogenerated (same mint as the genesis seed) and printed ONCE — record it immediately, it is not shown again.

WARNING: a —password value is visible in shell history and the process list; prefer omitting it and recording the generated one.

shc system keycloak reset-admin-password [flags]

Options

  -h, --help              help for reset-admin-password
      --password string   new admin password (omit to autogenerate and print it once)

Options inherited from parent commands

      --config stringArray   extra YAML config file to layer on top of auto-discovered config; repeatable, later files win
  -d, --debug                enable debug mode (default: $SHC_DEBUG)
  -e, --environment string   environment name (default: $SHC_ENVIRONMENT)
      --exclude string       comma-separated dotted paths to drop
      --fields string        comma-separated columns/keys to show (and their order)
      --filter string        comma-separated dotted paths to keep (drops everything else)
  -o, --output string        output format: tty|text|json|yaml (default: $SHC_OUTPUT)
  -s, --stack string         stack name (default: $SHC_STACK)
  -t, --tenant string        tenant name (default: $SHC_TENANT)
  -v, --verbose              verbose output (default: $SHC_VERBOSE)

shc system keycloak reset-admin-password