Kyvos Manager supports and uses Postgres as its repository. Data source configuration is set in file “ jdbc.properties, ” located at kyvosmanagerdata/server/db/.
...
jdbc.driverClassName=org.postgresql.Driver
jdbc.dialect=org.hibernate.dialect.PostgreSQLDialect
jdbc.url=jdbc:postgresql://localhost:45421/kmrepo
jdbc.username=kmdbuser
jdbc.password=S+VEVINQjaE8zJwrvLIsWk0VGCMCv0iv1txMIxYeJ0vH2A29RKYMug1n6iqArGgMrrfHMS34pUSEBX18
Password encryption-related configuration
...
Wizard based deployment
Bundled Postgres: No manual configuration changes are required in the jdbc.properties as everything works well with default provided configuration values in jdbc.properties
External Repository (AWS (RDS) or Flexible server):
Before configuring the jdbc.properties file, ensure that Kyvos Manager is not started.
Replace the server name in jdbc url with the server name of the Flexible server, port and SSL.
For example, jdbc.url=jdbc:postgresql://kyvosmanager-postgresserver-5122.postgres.database.azure.com:5432/kmrepo?sslmode=requirejdbc.username should be kmdbuser.
Set the value of useBundledRepo and manageBundledRepoService to ‘false.’
...
Changing jdbc.properties
Case 1
Suppose you plan to To use an external repository for Kyvos Manager (Either either during fresh deployment or upgrade or switching to an external repository as a Kyvos Manager repository). In that , in this case, you must update the following properties in the jdbc.properties file.
...
Panel | ||||||
---|---|---|---|---|---|---|
| ||||||
Important When you switch to a bundled repository as the Kyvos Manager repository while currently using the external repository, data migration from the external repository to a bundled repository becomes a prerequisite and a manual activity. |
Case 3
Update the following properties when migrating from Flexible Server to Single Server:
Anchor | ||||
---|---|---|---|---|
|
jdbc.url
jdbc.username
Other properties
The username and password must be updated if they are not the default.
jdbc.username=kmdbuser
jdbc.password=S+VEVINQjaE8zJwrvLIsWk0VGCMCv0iv1txMIxYeJ0vH2A29RKYMug1n6iqArGgMrrfHMS34pUSEBX18
During Kyvos Manager bootup or cluster deployment, it will be encrypted even if a password is added in plain text. If a plain text password is provided, ensure that the value for the property cryptographyAlgorithm is blank.
After restarting Kyvos Manager or completing the cluster deployment, if the specified password is used, it will also be moved to the secret used in the cluster.
...