Rotates, on the specified node, all credentials used for Operational Insights internal users. Internal users include @ns_server and @cbas.

Note that these internal credentials are already rotated automatically, by default, in accordance with the interval specified by the intCredsRotationInterval parameter of POST /settings/security (described in Configure On-the-Wire Security). However, the POST /node/controller/rotateInternalCredentials method and URI additionally permit the credentials to be rotated immediately, in the event of a security breach.

The caller must have the Full Admin or Security Admin role.

If successful, the method gives 200 OK, and returns an empty array.

If the node is being reconfigured — for example, while nodes are being added or joined — the method gives 503 Service Unavailable, and returns ["System is being reconfigured. Please try later."].

An incorrect URI gives 404 Object Not Found. Failure to authenticate gives 401 Unauthorized. An improper port number returns an error message such as Failed to connect, or Port number out of range.

The following immediately rotates credentials for all Operational Insights internal users on localhost:

If successful, the call returns an empty array. Note that completing rotation of the credentials may take some time.

Information on establishing and retrieving cluster-wide settings for the use of encryption and cipher-suites, including intCredsRotationInterval, is provided in Configure On-the-Wire Security.