轮换 Blob 存储凭据

简介

要在 Automation Suite 中轮换 Process Mining 的 Blob 存储凭据，管理员需要有权使用 kubectl、lens 或其他工具访问 Kubernetes 集群密码。必须使用新凭据更新以下详述的存储密码，并且需要重新启动 Airflow 和 Process Mining 的 Pod，以确保这些服务的所有 Pod 都收到新凭据。

注意：需要在 UiPath 命名空间和 Airflow 命名空间中更新存储凭据。

注意：存储的密码值采用 Base64 编码。如果使用 kubectl，则需要先对值进行编码，然后再在集群中更新这些值。如果使用镜头 (k8slens)，则镜头工具可以自动执行解码/编码。

示例

以下示例显示了如何使用kubectl更新密码：

kubectl patch secret processmining-external-storage-secret -n uipath -p "{\"data\":{\"ACCOUNTKEY\":\"<new_key_b64>\"}}"

Ceph 密码

UiPath 命名空间

processmining-service-rook-ceph-secret.OBJECT_STORAGE_ACCESSKEY

processmining-service-rook-ceph-secret.OBJECT_STORAGE_SECRETKEY

Airflow 命名空间

airflow-rook-ceph-secret.OBJECT_STORAGE_ACCESSKEY

airflow-rook-ceph-secret.OBJECT_STORAGE_SECRETKEY

processmining-service-rook-ceph-secret.OBJECT_STORAGE_ACCESSKEY

processmining-service-rook-ceph-secret.OBJECT_STORAGE_SECRETKEY

ceph-object-store-secret.OBJECT_STORAGE_ACCESSKEY

ceph-object-store-secret.OBJECT_STORAGE_SECRETKEY

Minio 密码：

UiPath 命名空间

processmining-external-storage-secret.ACCESSKEY

processmining-external-storage-secret.SECRETKEY

Airflow 命名空间

processmining-external-storage-secret.ACCESSKEY

processmining-external-storage-secret.SECRETKEY

processmining-external-storage-secret.connection

S3 密码：

UiPath 命名空间

processmining-external-storage-secret.ACCESSKEY

processmining-external-storage-secret.SECRETKEY

Airflow 命名空间

processmining-external-storage-secret.ACCESSKEY

processmining-external-storage-secret.SECRETKEY

processmining-external-storage-secret.connection

Azure 密码：

UiPath 命名空间

processmining-external-storage-secret.ACCOUNTNAME

processmining-external-storage-secret.ACCOUNTKEY

Airflow 命名空间

processmining-external-storage-secret.ACCOUNTNAME

processmining-external-storage-secret.ACCOUNTKEY

processmining-external-storage-secret.connection

注意：Azure 连接字符串采用 URL 编码；需要对字符串进行解码，更新访问密钥，然后重新编码。

urlencode -d "wasb%3A%2F%2Fazureuser%40%3Fextra__wasb__connection_string%3DDefaultEndpointsProtocol%3Dhttps%3BEndpointSuffix%3Dcore.windows.net%3BAccountName%3Dazureuser%3BAccountKey%3DACCOUNT_KEY%3BBlobEndpoint%3Dhttps%3A%2F%2Fexample.blob.core.windows.net%2F%3BFileEndpoint%3Dhttps%3A%2F%2Fexample.file.core.windows.net%2F%3BQueueEndpoint%3Dhttps%3A%2F%2Fexample.queue.core.windows.net%2F%3BTableEndpoint%3Dhttps%3A%2F%2Fexample.table.core.windows.net%2F%26extra__wasb__sas_token%3D%26extra__wasb__shared_access_key%3D%26extra__wasb__tenant_id%3D"
urlencode "wasb://azureuser@?extra__wasb__connection_string=DefaultEndpointsProtocol=https;EndpointSuffix=core.windows.net;AccountName=azureuser;AccountKey=ACCOUNT_KEY;BlobEndpoint=https://example.blob.core.windows.net/;FileEndpoint=https://example.file.core.windows.net/;QueueEndpoint=https://example.queue.core.windows.net/;TableEndpoint=https://example.table.core.windows.net/&extra__wasb__sas_token=&extra__wasb__shared_access_key=&extra__wasb__tenant_id="