Blossom Docs
Blossom

Reference

blossom database_instance:credentials:rotate

Rotate the Database instance password

Usage

blossom database_instance:credentials:rotate --id ID [--yes] [--password-stdin] [--follow] [--timestamps]

Flags

Flag Description
--id (required) Database instance id
--yes, -y Skip the confirmation prompt
--password-stdin Set the password read from stdin instead of generating one
--follow, -f Follow password rotation logs
--timestamps Show log timestamps. Default: true.

Sets a new password for the Database instance user inside the engine, then restarts every linked Environment so its apps receive the new connection URL. The old password stops working as soon as the engine accepts the new one.

Connections pause briefly while the password changes and the linked Environments restart. Replicas and the standby follow the primary. Show the new password afterward with database_instance:credentials.

blossom database_instance:credentials:rotate --id database_instance-100 --follow
blossom database_instance:credentials --id database_instance-100

To choose the password instead of generating one, pass it on stdin with --password-stdin so it never appears in shell history or process listings. It needs 8 to 64 characters: letters, digits, and ! # % * + , - . / : = ? @ ^ _ ~.

printf '%s' "$NEW_PASSWORD" | blossom database_instance:credentials:rotate --id database_instance-100 --password-stdin --yes
On this page