This section describes how to set password expiration to enforce periodic password changes and provide reminders before passwords expire.

Prerequisites

You need to be a member of a cluster and have the cluster-admin role within that cluster.

Steps

  1. Log in to the KubeSphere web console as a user with the cluster-admin role and enter your cluster.

  2. Click Configuration > Secret in the left navigation pane.

  3. Search for io.kubesphere.config.platformconfig.security.

  4. Click more on the right side of the Secret, then select Edit Settings from the dropdown list.

  5. In the Edit Settings dialog box, click pen-light to modify the value of each field. Then click OK.

    passwordPolicy:
  expireEnabled: false
  maxAgeDays: 90
  reminderDays: 7
    Parameter Description

    expireEnabled

    Whether to enable the password expiration feature, which forces periodic password changes.

    maxAgeDays

    If password expiration is enabled, the maximum validity period for a password is 90 days.

    reminderDays

    If password expiration is enabled, the system will start reminding the user 7 days before the password expires.