# How to change the default idm user via the Helm Chart **URL:** \ **Category:** Flowable Engine\ **Created:** [August 27, 2020, 1:58pm UTC](https://forum.flowable.org/t/how-to-change-the-default-idm-user-via-the-helm-chart/6610 "2020-08-27T13:58:39Z")\ **Posts on this page:** 7\ **Page:** 1
**Author:** ![Toady00](https://yyz1.discourse-cdn.com/flex035/user_avatar/forum.flowable.org/toady00/32/1956_2.png) [@Toady00](https://forum.flowable.org/u/Toady00)\ **Post date:** [August 27, 2020, 1:58pm UTC](https://forum.flowable.org/t/how-to-change-the-default-idm-user-via-the-helm-chart/6610/1 "2020-08-27T13:58:39Z")
When using the helm chart, how do we change the default username/password? We tried passing the java opts to the helm install command like this: ``` --set idm.javaOpts="flowable.common.app.idm-admin.user=admin,flowable.common.app.idm-admin.password=nottest" ``` This caused a login loop for modeler, workflow, and admin where it entering a username/password just redisplayed the login. Logging in to adm still works but with the old admin/test combo completely ignoring the new password. ---
**Author:** ![yvo](https://yyz1.discourse-cdn.com/flex035/user_avatar/forum.flowable.org/yvo/32/2231_2.png) [@yvo](https://forum.flowable.org/u/yvo)\ **Post date:** [August 27, 2020, 2:14pm UTC](https://forum.flowable.org/t/how-to-change-the-default-idm-user-via-the-helm-chart/6610/2 "2020-08-27T14:14:41Z")
Hi. Are you using the published Flowable (6.5.0) Helm chart? Or are you using the current master version? Regards, Yvo ---
**Author:** ![Toady00](https://yyz1.discourse-cdn.com/flex035/user_avatar/forum.flowable.org/toady00/32/1956_2.png) [@Toady00](https://forum.flowable.org/u/Toady00)\ **Post date:** [August 27, 2020, 2:26pm UTC](https://forum.flowable.org/t/how-to-change-the-default-idm-user-via-the-helm-chart/6610/3 "2020-08-27T14:26:23Z")
The published 6.5.0 chart ---
**Author:** ![yvo](https://yyz1.discourse-cdn.com/flex035/user_avatar/forum.flowable.org/yvo/32/2231_2.png) [@yvo](https://forum.flowable.org/u/yvo)\ **Post date:** [August 27, 2020, 8:22pm UTC](https://forum.flowable.org/t/how-to-change-the-default-idm-user-via-the-helm-chart/6610/4 "2020-08-27T20:22:44Z")
The properties for changing / setting the default admin account are not exposed in the 6.5.0 Helm template. This is added in the chart of the upcoming release. It should be possible to use the `JAVA_OPTS` for injecting them. However the `JAVA_OPTS` are not used in the ENTRY\_POINT of the used Docker images. I will fix this. For the 6.5.0 release I would suggest not using the Helm chart but modifying the Kubernetes config maps. Modify in the ‘apps’ configs (modeler / task etc) ; used for authentication ```auto FLOWABLE_COMMON_APP_IDM-ADMIN_USER: FLOWABLE_COMMON_APP_IDM-ADMIN_PASSWORD: ``` Add in IDM config ;used for the user creation ```auto FLOWABLE_IDM_APP_ADMIN_USER-ID= FLOWABLE_IDM_APP_ADMIN_PASSWORD= ``` Hope this helps. Yvo ---
**Author:** ![lasleyd](https://yyz1.discourse-cdn.com/flex035/user_avatar/forum.flowable.org/lasleyd/32/1981_2.png) [@lasleyd](https://forum.flowable.org/u/lasleyd)\ **Post date:** [September 10, 2020, 9:03pm UTC](https://forum.flowable.org/t/how-to-change-the-default-idm-user-via-the-helm-chart/6610/5 "2020-09-10T21:03:30Z")
We tried this for all of the currently deployed components (admin, idm, modeler, task) and in each case the behavior was: 1. changes to the app config values for authentication (`*_COMMON_*`) caused three of the components - admin, modeler, and task - to continually redirect back to the login screen (perpetual login loop). Additionally, this change had no effect on the admin user the database i.e. the username and password remained the same as before (“admin”/“test”). While troubleshooting, we also tried a manual update to the password (in `ACT_ID_USER`), and then noticed that for approximately 2 minutes the same three components were accessible _with the new credentials_, then all started returning 503 errors and were no longer available. 2. changes to the user creation values in IDM config caused the application to return 503 errors until the password was manually reverted in the database (in `ACT_ID_USER`) Example values which caused this behavior: `FLOWABLE_IDM_APP_ADMIN_USER-ID: admin` `FLOWABLE_IDM_APP_ADMIN_PASSWORD: nottest` The password does not get changed in the database; however, the password does get repopulated if it is manually deleted (deleting the credentials row), with the value of “nottest”, and accompanied with more 503 errors: Finally, we tried to change the admin password through the IDM UI, coupled with changing the `(*_COMMON_*)` variables, and this also resulted in 503 errors. This _did_ update the password in the database; however, the only way to restore service was to return the database password to the default value (“test”). ---
**Author:** ![lasleyd](https://yyz1.discourse-cdn.com/flex035/user_avatar/forum.flowable.org/lasleyd/32/1981_2.png) [@lasleyd](https://forum.flowable.org/u/lasleyd)\ **Post date:** [September 16, 2020, 2:19pm UTC](https://forum.flowable.org/t/how-to-change-the-default-idm-user-via-the-helm-chart/6610/6 "2020-09-16T14:19:52Z")
@yvo any other suggestions or avenues to explore here based on the information we shared last week? This is not yet a blocker but does present a security/durability concern going forward. Thank you ---
**Author:** ![tyler.brandt](https://avatars.discourse-cdn.com/v4/letter/t/bb73d2/32.png) [@tyler.brandt](https://forum.flowable.org/u/tyler.brandt)\ **Post date:** [March 12, 2021, 6:08pm UTC](https://forum.flowable.org/t/how-to-change-the-default-idm-user-via-the-helm-chart/6610/7 "2021-03-12T18:08:42Z")
For anyone still on the v6.5 helm chart, experiencing recurring 503 errors, this could be due to the hard coded authorization values in the readiness and liveness probes for each service ``` readinessProbe: httpGet: path: /actuator/health port: 8888 httpHeaders: - name: Authorization value: Basic YWRtaW46dGVzdA== initialDelaySeconds: 60 timeoutSeconds: 5 livenessProbe: httpGet: path: /actuator/health port: 8888 httpHeaders: - name: Authorization value: Basic YWRtaW46dGVzdA== ``` I would recommend changing those base64 encoded values to the following ``` {{- printf "%s:%s" "username" "password" | b64enc }} ```