From b83d5ab3c4198ac52cf9efe56507740c0d53b7c6 Mon Sep 17 00:00:00 2001 From: vcerenu Date: Tue, 3 Oct 2023 11:21:07 -0300 Subject: [PATCH 1/5] add steps for kubernetes change passwords --- .../kubernetes-deployment.rst | 167 ++++++++++++++++++ 1 file changed, 167 insertions(+) diff --git a/source/deployment-options/deploying-with-kubernetes/kubernetes-deployment.rst b/source/deployment-options/deploying-with-kubernetes/kubernetes-deployment.rst index 6dc9a2f41a..b975bc774f 100644 --- a/source/deployment-options/deploying-with-kubernetes/kubernetes-deployment.rst +++ b/source/deployment-options/deploying-with-kubernetes/kubernetes-deployment.rst @@ -191,6 +191,173 @@ The Wazuh dashboard will be accessible on ``https://localhost:8443``. The default credentials are ``admin:SecretPassword``. +Change the password of Wazuh users +^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ + +To improve security, you can change the default password of the Wazuh users. There are two types of Wazuh users: + +- Wazuh indexer users +- Wazuh API users + + To change the password of these Wazuh users, perform the following steps. You must run the commands from your ``single-node/`` or ``multi-node/`` directory, depending on your Wazuh on Docker deployment. + +Wazuh indexer users +~~~~~~~~~~~~~~~~~~~ + + To change the password of the default ``admin`` and ``kibanaserver`` users, do the following. + +.. warning:: + + If you have custom users, add them to the ``internal_users.yml`` file. Otherwise, executing this procedure deletes them. + +Setting a new hash +.................. + +#. Run this command to generate the hash of your new password. Once the container launches, input the new password and press **Enter**. + + .. code-block:: console + + # kubectl exec -it wazuh-indexer-0 -n wazuh -- /bin/bash + wazuh-indexer@wazuh-indexer-0:~$ export JAVA_HOME=/usr/share/wazuh-indexer/jdk + wazuh-indexer@wazuh-indexer-0:~$ bash /usr/share/wazuh-indexer/plugins/opensearch-security/tools/hash.sh + + +#. Copy the generated hash. + +#. Open the ``wazuh/indexer_stack/wazuh-indexer/indexer_conf/internal_users.yml`` file. Locate the block for the user you are changing password for. + +#. Replace the hash. + + - ``admin`` user + + .. code-block:: YAML + :emphasize-lines: 3 + + ... + admin: + hash: "$2y$12$K/SpwjtB.wOHJ/Nc6GVRDuc1h0rM1DfvziFRNPtk27P.c4yDr9njO" + reserved: true + backend_roles: + - "admin" + description: "Demo admin user" + + ... + + - ``kibanaserver`` user + + .. code-block:: YAML + :emphasize-lines: 3 + + ... + kibanaserver: + hash: "$2a$12$4AcgAt3xwOWadA5s5blL6ev39OXDNhmOesEoo33eZtrq2N0YrU3H." + reserved: true + description: "Demo kibanaserver user" + + ... + +.. _wazuh-docker-password-setting: + +Setting the new password +........................ + +#. Open the ``wazuh/secrets/indexer-cred-secret.yaml`` file when you need to change ``admin`` user or ``wazuh/secrets/dashboard-cred-secret.yaml`` file when you need to change ``kibanaserver`` user . Change the value of the secret "password" in the corresponding file, base64 encoding the new password: + + + + - ``admin`` user + + .. code-block:: YAML + :emphasize-lines: 8 + + ... + apiVersion: v1 + kind: Secret + metadata: + name: indexer-cred + data: + username: YWRtaW4= # string "admin" base64 encoded + password: U2VjcmV0UGFzc3dvcmQ= # string "SecretPassword" base64 encoded + ... + + - ``kibanaserver`` user + + .. code-block:: YAML + :emphasize-lines: 8 + + ... + apiVersion: v1 + kind: Secret + metadata: + name: dashboard-cred + data: + username: a2liYW5hc2VydmVy # string "kibanaserver" base64 encoded + password: a2liYW5hc2VydmVy # string "kibanaserver" base64 encoded + ... + +Applying the changes +.................... + +#. Apply the manifest changes + + .. code-block:: console + + # kubectl apply -k envs/eks/ + +#. Run ``kubectl exec -it -n wazuh -- /bin/bash`` to enter the container. For example: + + .. code-block:: console + + # kubectl exec -it wazuh-indexer-0 -n wazuh -- /bin/bash + +#. Set the following variables: + + .. code-block:: console + + export INSTALLATION_DIR=/usr/share/wazuh-indexer + CACERT=$INSTALLATION_DIR/certs/root-ca.pem + KEY=$INSTALLATION_DIR/certs/admin-key.pem + CERT=$INSTALLATION_DIR/certs/admin.pem + export JAVA_HOME=/usr/share/wazuh-indexer/jdk + +#. Wait for the Wazuh indexer to initialize properly. The waiting time can vary from two to five minutes. It depends on the size of the cluster, the assigned resources, and the speed of the network. Then, run the ``securityadmin.sh`` script to apply all changes. + + .. code-block:: console + + $ bash /usr/share/wazuh-indexer/plugins/opensearch-security/tools/securityadmin.sh -cd /usr/share/wazuh-indexer/opensearch-security/ -nhnv -cacert $CACERT -cert $CERT -key $KEY -p 9200 -icl -h $NODE_NAME + +#. Exit the Wazuh indexer container and login with the new credentials on the Wazuh dashboard. + +Wazuh API users +~~~~~~~~~~~~~~~ + +The ``wazuh-wui`` user is the user to connect with the Wazuh API by default. Follow these steps to change the password. + +.. note:: + + The password for Wazuh API users must be between 8 and 64 characters long. It must contain at least one uppercase and one lowercase letter, a number, and a symbol. + +#. Open the file ``wazuh/secrets/wazuh-api-cred-secret.yaml`` and modify the value of ``password`` parameter. + + .. code-block:: YAML + :emphasize-lines: 8 + + apiVersion: v1 + kind: Secret + metadata: + name: wazuh-api-cred + namespace: wazuh + data: + username: d2F6dWgtd3Vp # string "wazuh-wui" base64 encoded + password: UGFzc3dvcmQxMjM0LmE= # string "MyS3cr37P450r.*-" base64 encoded + +#. Apply the manifest changes + + .. code-block:: console + + # kubectl apply -k envs/eks/ + +#. Restart pods for Wazuh dashboasrd and Wazuh manager master Agents ^^^^^^ From bd9a60ab07e36a309bc72b6a2856004b2a3c750e Mon Sep 17 00:00:00 2001 From: vcerenu Date: Tue, 3 Oct 2023 11:32:57 -0300 Subject: [PATCH 2/5] add steps for kubernetes change passwords --- .../kubernetes-deployment.rst | 13 +++++-------- 1 file changed, 5 insertions(+), 8 deletions(-) diff --git a/source/deployment-options/deploying-with-kubernetes/kubernetes-deployment.rst b/source/deployment-options/deploying-with-kubernetes/kubernetes-deployment.rst index b975bc774f..0eb4c3fc17 100644 --- a/source/deployment-options/deploying-with-kubernetes/kubernetes-deployment.rst +++ b/source/deployment-options/deploying-with-kubernetes/kubernetes-deployment.rst @@ -199,8 +199,6 @@ To improve security, you can change the default password of the Wazuh users. The - Wazuh indexer users - Wazuh API users - To change the password of these Wazuh users, perform the following steps. You must run the commands from your ``single-node/`` or ``multi-node/`` directory, depending on your Wazuh on Docker deployment. - Wazuh indexer users ~~~~~~~~~~~~~~~~~~~ @@ -256,7 +254,6 @@ Setting a new hash ... -.. _wazuh-docker-password-setting: Setting the new password ........................ @@ -265,10 +262,10 @@ Setting the new password - - ``admin`` user + - ``admin`` user - .. code-block:: YAML - :emphasize-lines: 8 + .. code-block:: YAML + :emphasize-lines: 8 ... apiVersion: v1 @@ -278,7 +275,7 @@ Setting the new password data: username: YWRtaW4= # string "admin" base64 encoded password: U2VjcmV0UGFzc3dvcmQ= # string "SecretPassword" base64 encoded - ... + ... - ``kibanaserver`` user @@ -293,7 +290,7 @@ Setting the new password data: username: a2liYW5hc2VydmVy # string "kibanaserver" base64 encoded password: a2liYW5hc2VydmVy # string "kibanaserver" base64 encoded - ... + ... Applying the changes .................... From 0ed31e71d3798ce2bff3dd4c49534a109772fafd Mon Sep 17 00:00:00 2001 From: vcerenu Date: Tue, 3 Oct 2023 12:05:48 -0300 Subject: [PATCH 3/5] fix indentation and add base64 notes --- .../kubernetes-deployment.rst | 140 +++++++++--------- 1 file changed, 72 insertions(+), 68 deletions(-) diff --git a/source/deployment-options/deploying-with-kubernetes/kubernetes-deployment.rst b/source/deployment-options/deploying-with-kubernetes/kubernetes-deployment.rst index 0eb4c3fc17..9ddc748e48 100644 --- a/source/deployment-options/deploying-with-kubernetes/kubernetes-deployment.rst +++ b/source/deployment-options/deploying-with-kubernetes/kubernetes-deployment.rst @@ -226,33 +226,33 @@ Setting a new hash #. Replace the hash. - - ``admin`` user + - ``admin`` user - .. code-block:: YAML - :emphasize-lines: 3 + .. code-block:: YAML + :emphasize-lines: 3 - ... - admin: - hash: "$2y$12$K/SpwjtB.wOHJ/Nc6GVRDuc1h0rM1DfvziFRNPtk27P.c4yDr9njO" - reserved: true - backend_roles: - - "admin" - description: "Demo admin user" + ... + admin: + hash: "$2y$12$K/SpwjtB.wOHJ/Nc6GVRDuc1h0rM1DfvziFRNPtk27P.c4yDr9njO" + reserved: true + backend_roles: + - "admin" + description: "Demo admin user" - ... + ... - - ``kibanaserver`` user + - ``kibanaserver`` user - .. code-block:: YAML - :emphasize-lines: 3 + .. code-block:: YAML + :emphasize-lines: 3 - ... - kibanaserver: - hash: "$2a$12$4AcgAt3xwOWadA5s5blL6ev39OXDNhmOesEoo33eZtrq2N0YrU3H." - reserved: true - description: "Demo kibanaserver user" + ... + kibanaserver: + hash: "$2a$12$4AcgAt3xwOWadA5s5blL6ev39OXDNhmOesEoo33eZtrq2N0YrU3H." + reserved: true + description: "Demo kibanaserver user" - ... + ... Setting the new password @@ -260,66 +260,70 @@ Setting the new password #. Open the ``wazuh/secrets/indexer-cred-secret.yaml`` file when you need to change ``admin`` user or ``wazuh/secrets/dashboard-cred-secret.yaml`` file when you need to change ``kibanaserver`` user . Change the value of the secret "password" in the corresponding file, base64 encoding the new password: +.. note:: + + If you use the ``echo`` command to execute the ``base64`` command on Linux, remember to add the -n option so that it does not record a line break at the end and does not modify the password hash + ``# echo -n "NewPassword" | base64`` - ``admin`` user .. code-block:: YAML - :emphasize-lines: 8 - - ... - apiVersion: v1 - kind: Secret - metadata: - name: indexer-cred - data: - username: YWRtaW4= # string "admin" base64 encoded - password: U2VjcmV0UGFzc3dvcmQ= # string "SecretPassword" base64 encoded - ... - - - ``kibanaserver`` user - - .. code-block:: YAML - :emphasize-lines: 8 - - ... - apiVersion: v1 - kind: Secret - metadata: - name: dashboard-cred - data: - username: a2liYW5hc2VydmVy # string "kibanaserver" base64 encoded - password: a2liYW5hc2VydmVy # string "kibanaserver" base64 encoded - ... + :emphasize-lines: 8 + + ... + apiVersion: v1 + kind: Secret + metadata: + name: indexer-cred + data: + username: YWRtaW4= # string "admin" base64 encoded + password: U2VjcmV0UGFzc3dvcmQ= # string "SecretPassword" base64 encoded + ... + + - ``kibanaserver`` user + + .. code-block:: YAML + emphasize-lines: 8 + + ... + apiVersion: v1 + kind: Secret + metadata: + name: dashboard-cred + data: + username: a2liYW5hc2VydmVy # string "kibanaserver" base64 encoded + password: a2liYW5hc2VydmVy # string "kibanaserver" base64 encoded + ... Applying the changes .................... #. Apply the manifest changes - .. code-block:: console + .. code-block:: console - # kubectl apply -k envs/eks/ + # kubectl apply -k envs/eks/ #. Run ``kubectl exec -it -n wazuh -- /bin/bash`` to enter the container. For example: - .. code-block:: console + .. code-block:: console - # kubectl exec -it wazuh-indexer-0 -n wazuh -- /bin/bash + # kubectl exec -it wazuh-indexer-0 -n wazuh -- /bin/bash #. Set the following variables: - .. code-block:: console + .. code-block:: console - export INSTALLATION_DIR=/usr/share/wazuh-indexer - CACERT=$INSTALLATION_DIR/certs/root-ca.pem - KEY=$INSTALLATION_DIR/certs/admin-key.pem - CERT=$INSTALLATION_DIR/certs/admin.pem - export JAVA_HOME=/usr/share/wazuh-indexer/jdk + export INSTALLATION_DIR=/usr/share/wazuh-indexer + CACERT=$INSTALLATION_DIR/certs/root-ca.pem + KEY=$INSTALLATION_DIR/certs/admin-key.pem + CERT=$INSTALLATION_DIR/certs/admin.pem + export JAVA_HOME=/usr/share/wazuh-indexer/jdk #. Wait for the Wazuh indexer to initialize properly. The waiting time can vary from two to five minutes. It depends on the size of the cluster, the assigned resources, and the speed of the network. Then, run the ``securityadmin.sh`` script to apply all changes. - .. code-block:: console + .. code-block:: console $ bash /usr/share/wazuh-indexer/plugins/opensearch-security/tools/securityadmin.sh -cd /usr/share/wazuh-indexer/opensearch-security/ -nhnv -cacert $CACERT -cert $CERT -key $KEY -p 9200 -icl -h $NODE_NAME @@ -336,23 +340,23 @@ The ``wazuh-wui`` user is the user to connect with the Wazuh API by default. Fol #. Open the file ``wazuh/secrets/wazuh-api-cred-secret.yaml`` and modify the value of ``password`` parameter. - .. code-block:: YAML - :emphasize-lines: 8 + .. code-block:: YAML + :emphasize-lines: 8 - apiVersion: v1 - kind: Secret - metadata: - name: wazuh-api-cred + apiVersion: v1 + kind: Secret + metadata: + name: wazuh-api-cred namespace: wazuh - data: - username: d2F6dWgtd3Vp # string "wazuh-wui" base64 encoded - password: UGFzc3dvcmQxMjM0LmE= # string "MyS3cr37P450r.*-" base64 encoded + data: + username: d2F6dWgtd3Vp # string "wazuh-wui" base64 encoded + password: UGFzc3dvcmQxMjM0LmE= # string "MyS3cr37P450r.*-" base64 encoded #. Apply the manifest changes - .. code-block:: console + .. code-block:: console - # kubectl apply -k envs/eks/ + # kubectl apply -k envs/eks/ #. Restart pods for Wazuh dashboasrd and Wazuh manager master From beea1aed57dd086ec144f6d7eec737275a47c7f9 Mon Sep 17 00:00:00 2001 From: Javier Medeot Date: Tue, 3 Oct 2023 16:36:27 -0300 Subject: [PATCH 4/5] Add review changes --- .../kubernetes-deployment.rst | 153 +++++++++--------- 1 file changed, 81 insertions(+), 72 deletions(-) diff --git a/source/deployment-options/deploying-with-kubernetes/kubernetes-deployment.rst b/source/deployment-options/deploying-with-kubernetes/kubernetes-deployment.rst index 9ddc748e48..b2ba0e3f97 100644 --- a/source/deployment-options/deploying-with-kubernetes/kubernetes-deployment.rst +++ b/source/deployment-options/deploying-with-kubernetes/kubernetes-deployment.rst @@ -211,123 +211,126 @@ Wazuh indexer users Setting a new hash .................. -#. Run this command to generate the hash of your new password. Once the container launches, input the new password and press **Enter**. +#. Start a Bash shell in ``wazuh-indexer-0``. .. code-block:: console # kubectl exec -it wazuh-indexer-0 -n wazuh -- /bin/bash + +#. Run these commands to generate the hash of your new password. When prompted, input the new password and press **Enter**. + + .. code-block:: console + wazuh-indexer@wazuh-indexer-0:~$ export JAVA_HOME=/usr/share/wazuh-indexer/jdk wazuh-indexer@wazuh-indexer-0:~$ bash /usr/share/wazuh-indexer/plugins/opensearch-security/tools/hash.sh - -#. Copy the generated hash. +#. Copy the generated hash and exit the Bash shell. #. Open the ``wazuh/indexer_stack/wazuh-indexer/indexer_conf/internal_users.yml`` file. Locate the block for the user you are changing password for. #. Replace the hash. - - ``admin`` user + - ``admin`` user - .. code-block:: YAML - :emphasize-lines: 3 + .. code-block:: YAML + :emphasize-lines: 3 - ... - admin: - hash: "$2y$12$K/SpwjtB.wOHJ/Nc6GVRDuc1h0rM1DfvziFRNPtk27P.c4yDr9njO" - reserved: true - backend_roles: - - "admin" - description: "Demo admin user" - - ... - - - ``kibanaserver`` user - - .. code-block:: YAML - :emphasize-lines: 3 + ... + admin: + hash: "$2y$12$K/SpwjtB.wOHJ/Nc6GVRDuc1h0rM1DfvziFRNPtk27P.c4yDr9njO" + reserved: true + backend_roles: + - "admin" + description: "Demo admin user" + + ... - ... - kibanaserver: - hash: "$2a$12$4AcgAt3xwOWadA5s5blL6ev39OXDNhmOesEoo33eZtrq2N0YrU3H." - reserved: true - description: "Demo kibanaserver user" + - ``kibanaserver`` user - ... + .. code-block:: YAML + :emphasize-lines: 3 + ... + kibanaserver: + hash: "$2a$12$4AcgAt3xwOWadA5s5blL6ev39OXDNhmOesEoo33eZtrq2N0YrU3H." + reserved: true + description: "Demo kibanaserver user" + + ... Setting the new password ........................ -#. Open the ``wazuh/secrets/indexer-cred-secret.yaml`` file when you need to change ``admin`` user or ``wazuh/secrets/dashboard-cred-secret.yaml`` file when you need to change ``kibanaserver`` user . Change the value of the secret "password" in the corresponding file, base64 encoding the new password: +#. Encode your new password in base64 format. Avoid inserting a trailing newline character to maintain the hash value. For example, use the ``-n`` option with the ``echo`` command as follows. -.. note:: + .. code-block:: + + # echo -n "NewPassword" | base64 - If you use the ``echo`` command to execute the ``base64`` command on Linux, remember to add the -n option so that it does not record a line break at the end and does not modify the password hash - ``# echo -n "NewPassword" | base64`` +#. Edit the indexer or dashbboard secrets configuration file as follows. Replace the value of the ``password`` field with your new encoded password. + - To change the ``admin`` user password, edit the ``wazuh/secrets/indexer-cred-secret.yaml`` file. - - ``admin`` user + .. code-block:: YAML + :emphasize-lines: 8 - .. code-block:: YAML - :emphasize-lines: 8 + ... + apiVersion: v1 + kind: Secret + metadata: + name: indexer-cred + data: + username: YWRtaW4= # string "admin" base64 encoded + password: U2VjcmV0UGFzc3dvcmQ= # string "SecretPassword" base64 encoded + ... - ... - apiVersion: v1 - kind: Secret - metadata: - name: indexer-cred - data: - username: YWRtaW4= # string "admin" base64 encoded - password: U2VjcmV0UGFzc3dvcmQ= # string "SecretPassword" base64 encoded - ... + - To change the ``kibanaserver`` user password, edit the ``wazuh/secrets/dashboard-cred-secret.yaml`` file. - - ``kibanaserver`` user + .. code-block:: YAML + :emphasize-lines: 8 - .. code-block:: YAML - emphasize-lines: 8 - - ... - apiVersion: v1 - kind: Secret - metadata: - name: dashboard-cred - data: - username: a2liYW5hc2VydmVy # string "kibanaserver" base64 encoded - password: a2liYW5hc2VydmVy # string "kibanaserver" base64 encoded - ... + ... + apiVersion: v1 + kind: Secret + metadata: + name: dashboard-cred + data: + username: a2liYW5hc2VydmVy # string "kibanaserver" base64 encoded + password: a2liYW5hc2VydmVy # string "kibanaserver" base64 encoded + ... Applying the changes .................... #. Apply the manifest changes - .. code-block:: console + .. code-block:: console - # kubectl apply -k envs/eks/ + # kubectl apply -k envs/eks/ -#. Run ``kubectl exec -it -n wazuh -- /bin/bash`` to enter the container. For example: +#. Start a bash shell in ``wazuh-indexer-0`` once more. - .. code-block:: console + .. code-block:: console - # kubectl exec -it wazuh-indexer-0 -n wazuh -- /bin/bash + # kubectl exec -it wazuh-indexer-0 -n wazuh -- /bin/bash #. Set the following variables: - .. code-block:: console + .. code-block:: console - export INSTALLATION_DIR=/usr/share/wazuh-indexer - CACERT=$INSTALLATION_DIR/certs/root-ca.pem - KEY=$INSTALLATION_DIR/certs/admin-key.pem - CERT=$INSTALLATION_DIR/certs/admin.pem - export JAVA_HOME=/usr/share/wazuh-indexer/jdk + export INSTALLATION_DIR=/usr/share/wazuh-indexer + CACERT=$INSTALLATION_DIR/certs/root-ca.pem + KEY=$INSTALLATION_DIR/certs/admin-key.pem + CERT=$INSTALLATION_DIR/certs/admin.pem + export JAVA_HOME=/usr/share/wazuh-indexer/jdk #. Wait for the Wazuh indexer to initialize properly. The waiting time can vary from two to five minutes. It depends on the size of the cluster, the assigned resources, and the speed of the network. Then, run the ``securityadmin.sh`` script to apply all changes. - .. code-block:: console + .. code-block:: console - $ bash /usr/share/wazuh-indexer/plugins/opensearch-security/tools/securityadmin.sh -cd /usr/share/wazuh-indexer/opensearch-security/ -nhnv -cacert $CACERT -cert $CERT -key $KEY -p 9200 -icl -h $NODE_NAME + $ bash /usr/share/wazuh-indexer/plugins/opensearch-security/tools/securityadmin.sh -cd /usr/share/wazuh-indexer/opensearch-security/ -nhnv -cacert $CACERT -cert $CERT -key $KEY -p 9200 -icl -h $NODE_NAME -#. Exit the Wazuh indexer container and login with the new credentials on the Wazuh dashboard. +#. Login with the new credentials on the Wazuh dashboard. Wazuh API users ~~~~~~~~~~~~~~~ @@ -338,7 +341,13 @@ The ``wazuh-wui`` user is the user to connect with the Wazuh API by default. Fol The password for Wazuh API users must be between 8 and 64 characters long. It must contain at least one uppercase and one lowercase letter, a number, and a symbol. -#. Open the file ``wazuh/secrets/wazuh-api-cred-secret.yaml`` and modify the value of ``password`` parameter. +#. Encode your new password in base64 format. Avoid inserting a trailing newline character to maintain the hash value. For example, use the ``-n`` option with the ``echo`` command as follows. + + .. code-block:: + + # echo -n "NewPassword" | base64 + +#. Edit the ``wazuh/secrets/wazuh-api-cred-secret.yaml`` file and replace the value of the ``password`` field. .. code-block:: YAML :emphasize-lines: 8 @@ -352,13 +361,13 @@ The ``wazuh-wui`` user is the user to connect with the Wazuh API by default. Fol username: d2F6dWgtd3Vp # string "wazuh-wui" base64 encoded password: UGFzc3dvcmQxMjM0LmE= # string "MyS3cr37P450r.*-" base64 encoded -#. Apply the manifest changes +#. Apply the manifest changes. .. code-block:: console # kubectl apply -k envs/eks/ -#. Restart pods for Wazuh dashboasrd and Wazuh manager master +#. Restart pods for Wazuh dashboard and Wazuh manager master. Agents ^^^^^^ From 8d9a94476cd6102820bf0d8827dc39b25d4efaa9 Mon Sep 17 00:00:00 2001 From: Javier Medeot Date: Tue, 3 Oct 2023 16:43:34 -0300 Subject: [PATCH 5/5] Fix indentation in yaml example --- .../kubernetes-deployment.rst | 22 +++++++++---------- 1 file changed, 11 insertions(+), 11 deletions(-) diff --git a/source/deployment-options/deploying-with-kubernetes/kubernetes-deployment.rst b/source/deployment-options/deploying-with-kubernetes/kubernetes-deployment.rst index b2ba0e3f97..4c1da4968f 100644 --- a/source/deployment-options/deploying-with-kubernetes/kubernetes-deployment.rst +++ b/source/deployment-options/deploying-with-kubernetes/kubernetes-deployment.rst @@ -349,17 +349,17 @@ The ``wazuh-wui`` user is the user to connect with the Wazuh API by default. Fol #. Edit the ``wazuh/secrets/wazuh-api-cred-secret.yaml`` file and replace the value of the ``password`` field. - .. code-block:: YAML - :emphasize-lines: 8 - - apiVersion: v1 - kind: Secret - metadata: - name: wazuh-api-cred - namespace: wazuh - data: - username: d2F6dWgtd3Vp # string "wazuh-wui" base64 encoded - password: UGFzc3dvcmQxMjM0LmE= # string "MyS3cr37P450r.*-" base64 encoded + .. code-block:: YAML + :emphasize-lines: 8 + + apiVersion: v1 + kind: Secret + metadata: + name: wazuh-api-cred + namespace: wazuh + data: + username: d2F6dWgtd3Vp # string "wazuh-wui" base64 encoded + password: UGFzc3dvcmQxMjM0LmE= # string "MyS3cr37P450r.*-" base64 encoded #. Apply the manifest changes.