As communicated to MongoHQ subscribers via email, MongoHQ is in the process of resetting the 'cloudbees' user password for all MongoHQ instances that have been created by CloudBees customers. CloudBees is working with MongoHQ to co-ordinate this reset process and minimize its impact on customers.
-
If you have any applications running on CloudBees using resource bindings to connect to a MongoHQ database, we will automatically restart your application after the password is reset. No action is required on your part. These existing applications using the MongoHQ service will continue to work after the restart.
-
If you have any applications or external resources that are directly connecting to MongoHQ using the current ‘cloudbees’ username/password, these credentials will no longer work after the automated password reset. In this case, you should take steps now to ensure that your MongoHQ clients are using credentials that you have created using the MongoHQ admin->users page. Until you make changes to use the new credentials, existing applications making direct connections using the ‘cloudbees’ username/password will not work once the password reset has taken place.
-
If you have taken proactive steps already to remove the ‘cloudbees’ user and to adjust your application application code to initialize your MongoHQ clients with the new credentials that you have provisioned, you will not be impacted by the upcoming reset process for the ‘cloudbees’ user.
In summary, for CloudBees users of MongoHQ…
-
If you take no action and are using CloudBees resource bindings to connect applications to MongoHQ, an upcoming reset of the ‘cloudbees’ password, followed by an application restart will take place to properly secure your database.
-
If you connect to MongoHQ directly or you want to take action before the upcoming password reset, you need to reset your passwords and modify your application logic accordingly.
-
If you connect to MongoHQ directly using the ‘cloudbees’ username (unlikely but possible), the upcoming password reset will require you to create a new username/password combination and modify your application logic accordingly.
We will post an update once the MongoHQ password reset process is completed. If you have any questions, please open a CloudBees support ticket.
Additional resources:
-
Binding resources to applications: http://wiki.cloudbees.com/bin/
view/RUN/Resource+Management -
Environment variables, configuration parameters and system properties: https://developer.cloudbees.
com/bin/view/RUN/ Configuration+Parameters -
MongoHQ on CloudBees: https://developer.cloudbees.
com/bin/view/RUN/MongoHQ -
MongoHQ Security Notice: http://security.mongohq.com/
notice
