Rotate Password
POST/api/v1/auth/accounts/:username/rotate-password
Rotate the local admin's password in the deployment's secret store.
The store that injects DFE_ENGINE_AUTH_LOCAL_ADMIN_PASSWORD is the source of that
password, so the engine writes the new value through its secrets backend and
never into its own YAML. The next boot reconcile issues the rotated value to
the admin, who must replace it at the following login. Returns 501 with the
command that changes it where it is kept when the deployment has not declared
a secrets path for the password. Every other account, breakglass included,
changes its password through reset-password.
Request
Responses
- 200
- 401
- 403
- 422
- default
Successful Response
No valid session: the credentials are missing, invalid or expired, or the account behind them is disabled or blocked
Refused: the session lacks the action this route checks, or its account must replace an issued password first. A SCIM route answers a refused action in the RFC 7644 error envelope
Validation Error
Problem details (RFC 9457)