As a pre-requisite to support DCAEGEN2-1972, cloudify pod needs to be enhanced to source the password from k8s secrets or environment variable. Currently Cloudify Manager password is set in a configuration file that's part of the container file system.

• Cloudify  - https://wiki.web.att.com/pages/viewpage.action?spaceKey=ECOMPC&title=Cloudify+Manager+patches+and+fixes
• Cloudify password on helm chart can be changed to use secret (secret may still have to be hardcoded depending on Cloudify feedback on #1)
  • dcae-bootstrap   
  • dcae-cloudify-manager   
  • dcae-dashboard   
  • dcae-deployment-handler  

Per Cloudify #10571 - Starting at Cloudify 5.1 and it's community equivalent you can reset the admin password using cfy_manager --reset_admin_password <NEW_PASSWORD>.
For older versions you can use the script , it will work on all versions equivalent to 4.6 or older.