Admin Account

This page describes how to configure admin accounts in Lenses.

You can configure a list of the principals (users, service accounts) with root admin access. Access control allows any API operation performed by such principals. If not set, it will default to [].

Admin accounts are set in the config.yaml for HQ under the auth.administrators key, as an array of usernames.

config.yaml

auth:
  administrators:
  - admin
  - [e-mail]
  - [e-mail]    

Changing the Admin Password

To change the admin password, update the config.yaml in the auth.users section. Set the password of the admin users.

Passwords need to be bcrypt hashes.

You can use the Lenses CLI to create a bcrypt password. You can download the CLI here. The executable for Lenses 6 CLI is called "hq".

hq utils hash-password

auth:
  - admin
  - [e-mail]
  - [e-mail]
users:
  - username: admin
    password: $2a$12$XQW..XQrtZXCvbQWertqQeFi/1KoQW4eNephNXTfHqtoW9Q4qih5G