From 92646686aa43f105dc0bea32515fc4fb00ccdd13 Mon Sep 17 00:00:00 2001
From: Billy Tat <btat@suse.com>
Date: Thu, 16 Sep 2021 15:30:18 -0700
Subject: [PATCH] Add bootstrapPassword to Helm options page (#3526)

---
 .../chart-options/_index.md                     | 17 +++++++++++++++++
 1 file changed, 17 insertions(+)

diff --git a/content/rancher/v2.6/en/installation/install-rancher-on-k8s/chart-options/_index.md b/content/rancher/v2.6/en/installation/install-rancher-on-k8s/chart-options/_index.md
index b40974f5729..2baf1a94b8f 100644
--- a/content/rancher/v2.6/en/installation/install-rancher-on-k8s/chart-options/_index.md
+++ b/content/rancher/v2.6/en/installation/install-rancher-on-k8s/chart-options/_index.md
@@ -24,6 +24,7 @@ For information on enabling experimental features, refer to [this page.]({{<base
 
 | Option                    | Default Value | Description                                                                        |
 | ------------------------- | ------------- | ---------------------------------------------------------------------------------- |
+| `bootstrapPassword`       | " "           | `string` - Set the [bootstrap password](#bootstrap-password) for the first admin user. After logging in, the admin will need to reset their password. A randomly generated bootstrap password is used if this value is not set.
 | `hostname`                | " "           | `string` - the Fully Qualified Domain Name for your Rancher Server                 |
 | `ingress.tls.source`      | "rancher"     | `string` - Where to get the cert for the ingress. - "rancher, letsEncrypt, secret" |
 | `letsEncrypt.email`       | " "           | `string` - Your email address                                                      |
@@ -68,6 +69,22 @@ For information on enabling experimental features, refer to [this page.]({{<base
 
 
 
+### Bootstrap Password
+
+When Rancher starts for the first time, a password is randomly generated for the first admin user. When the admin first logs in to Rancher, the UI shows commands that can be used to retrieve the bootstrap password. The admin needs to run those commands and log in with the bootstrap password. Then Rancher gives the admin an opportunity to reset the password.
+
+If you want to use a specific bootstrap password instead of a randomly generated one, provide the password.
+
+```plain
+--set bootstrapPassword="rancher"
+```
+
+The password, whether provided or generated, will be stored in a Kubernetes secret. After Rancher is installed, the UI will show instructions for how to retrieve the password using kubectl:
+
+```
+kubectl get secret --namespace cattle-system bootstrap-secret -o go-template='{{ .data.bootstrapPassword|base64decode}}{{ "\n" }}'
+```
+
 ### API Audit Log
 
 Enabling the [API Audit Log]({{<baseurl>}}/rancher/v2.6/en/installation/resources/advanced/api-audit-log)