Getting a YTsaurus administrator password and token
Written by
Updated at July 24, 2026
After you enable the component, the YTsaurus cluster administrator credentials are stored in the ytadminsec Secret in the stackland-ytsaurus namespace.
The secret contains three keys:
login: Administrator login, alwaysadmin.password: Administrator password for accessing the YTsaurus web UI.token: Token for accessing the YTsaurus HTTP proxy via theytCLI, SDK, and third-party clients.
Getting an administrator login
kubectl -n stackland-ytsaurus get secret ytadminsec -o jsonpath='{.data.login}' | base64 -d
Getting an administrator password
kubectl -n stackland-ytsaurus get secret ytadminsec -o jsonpath='{.data.password}' | base64 -d
Getting an administrator token
kubectl -n stackland-ytsaurus get secret ytadminsec -o jsonpath='{.data.token}' | base64 -d
Warning
The token provides full administrative access to the YTsaurus cluster. Keep the token secure and do not expose it in version control systems, logs, or messages.
Getting all values at once
The following command decodes and outputs all three Secret keys:
for KEY in login password token; do
printf '%s: ' "$KEY"
kubectl -n stackland-ytsaurus get secret ytadminsec -o jsonpath="{.data.$KEY}" | base64 -d
printf '\n'
done