Skip to content

Commit 813a79c

Browse files
waynrjstirnaman
authored andcommitted
fix(clustered): update admin token revocation steps (#5612)
1 parent 1415a84 commit 813a79c

File tree

1 file changed

+7
-8
lines changed

1 file changed

+7
-8
lines changed

content/influxdb/clustered/admin/bypass-identity-provider.md

Lines changed: 7 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -63,13 +63,13 @@ The only way to revoke the token is to do the following:
6363

6464
{{% code-placeholders "INFLUXDB_NAMESPACE|KEY_GEN_JOB|001" %}}
6565

66-
1. Delete the `rsa-keys` secret from your InfluxDB cluster's context and namespace:
66+
1. Delete the `rsa-keys` and `admin-token` secrets from your InfluxDB cluster's context and namespace:
6767
6868
```sh
69-
kubectl delete secrets/rsa-keys --namespace INFLUXDB_NAMESPACE
69+
kubectl delete secret rsa-keys admin-token --namespace INFLUXDB_NAMESPACE
7070
```
7171
72-
2. Rerun the `key-gen` job:
72+
2. Rerun the `key-gen` and `create-amin-token` jobs:
7373
7474
1. List the jobs in your InfluxDB namespace to find the key-gen job pod:
7575
@@ -78,12 +78,11 @@ The only way to revoke the token is to do the following:
7878
kubectl get jobs --namespace INFLUXDB_NAMESPACE
7979
```
8080
81-
2. Run the key-gen job and increment the job number as needed:
82-
81+
2. Delete the key-gen and create-admin-token jobs so they it will be re-created by kubit:
82+
8383
```sh
84-
kubectl create job \
85-
--from=job/KEY_GEN_JOB key-gen-001 \
86-
--namespace INFLUXDB_NAMESPACE
84+
kubectl delete job/KEY_GEN_JOB job/CREATE_ADMIN_TOKEN_JOB \
85+
--namespace INFLUXDB_NAMESPACE
8786
```
8887
8988
3. Restart the `token-management` service:

0 commit comments

Comments
 (0)