kubeblocks-manage-accounts

Retrieves, rotates, and preconfigures database credentials on existing KubeBlocks clusters using Kubernetes Secrets.

3|Updated Mar 12, 2026
One-click install
npx skills add https://github.com/apecloud/kubeblocks-skills --skill kubeblocks-manage-accounts
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: kubeblocks-manage-accounts
Source: https://github.com/apecloud/kubeblocks-skills/tree/main/skills/kubeblocks-manage-accounts
Command: npx skills add https://github.com/apecloud/kubeblocks-skills --skill kubeblocks-manage-accounts

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

KubeBlocks automatically creates database accounts and manages credentials; this skill provides retrieval, rotation, and preconfiguration of account passwords on existing clusters, storing secrets and guiding password policies to ensure secure operations.

Core Features & Use Cases

  • Retrieve current credentials from Kubernetes Secrets
  • Configure custom passwords via Secret references
  • Apply password-generation policies and preconfigure systemAccounts
  • Route TLS/mTLS requests to kubeblocks-configure-tls and escalate to troubleshooting when needed

Quick Start

Start from the preflight flow and follow Step 1 to access current credentials for an existing cluster.

Frequently Asked Questions about kubeblocks-manage-accounts

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I retrieve database credentials for an existing KubeBlocks cluster?

You can retrieve database credentials for an existing KubeBlocks cluster by accessing the preflight flow, which fetches current passwords stored as Kubernetes Secrets. This approach securely provides existing account details for immediate database access.

How does credential rotation work for KubeBlocks databases?

Credential rotation for KubeBlocks databases works by replacing existing passwords and updating the references stored in Kubernetes Secrets. This process enforces engine-aware boundaries to ensure secure and predictable account management across your clusters.

Can I use Kubernetes Secrets to configure custom passwords for database accounts?

Yes, you can configure custom passwords for database accounts by applying Secret references. This allows you to define specific credentials during cluster provisioning while adhering to password-generation policies and systemAccounts preconfiguration.

Does credential management integrate with TLS routing for KubeBlocks clusters?

Credential management integrates with TLS routing by directing TLS and mTLS requests to kubeblocks-configure-tls. If issues arise during this process, it escalates to troubleshooting skills to maintain safe and predictable operations.

What are the limitations when applying password-generation policies to KubeBlocks clusters?

Limitations when applying password-generation policies involve adhering to engine-aware boundaries dictated by the specific database engine. You must follow the capability matrices to ensure the preconfigured systemAccounts and policies are supported.