Switching to an Externally Managed Repository

This documentation is for Kyvos 2026.8.x. To view documentation for other Kyvos versions, click here.

This documentation is for Kyvos 2026.8.x. To view documentation for other Kyvos versions, click here.

Starting with Kyvos 2026.8, you can use externally managed PostgreSQL repositories (with certified PostgreSQL versions) for both Kyvos and Kyvos Manager.

Note

Externally managed repositories must be used consistently across both systems. For example, if Kyvos Manager is configured to use an externally managed repository, Kyvos must also use an externally managed repository.
To switch to a different repository type, you must first update the Kyvos Manager repository and then update the Kyvos repository accordingly.
Repository Management will be Kyvos Managed when the deployment is performed using either InstallPG or an external repository.

Switch Repository for Kyvos Manager

To switch Kyvos Manager repository, perform the following steps.

Stop all Kyvos Services from Kyvos Manager UI.
Connect to the Kyvos Manager (KM) node using SSH.
Navigate to /kyvosmanager/bin/ and stop Kyvos Manager by executing the stop-km.sh command from the terminal.
Export Kyvos Manager Repository Dump by running the following command.
pg_dump -U postgres -h <installed_host> -p <port> -d <kyvos_database> -f <kyvos_dump_path> -or- pg_dump -c -C --host=172.25.0.5 --port=45421 --dbname=kmrepo --user=kmdbuser > kmrepo.sql
Import Dump to External PostgreSQL by running the following command.
psql -U postgres -h <external_host> -p <port> -d <km_database> -f <km_dump_path>
Update the following properties in the "kyvosmangerdata/server/db/jdbc.properties" file of Kyvos Manager, depending on your current repository configuration.
1. If Kyvos Manager is currently using an external repository:
  1. Set the value of repoIdentifier to empty.
  2. Set repoManagementOwnership to EXTERNAL.
2. If Kyvos Manager is currently using a bundled or installed repository
  1. Set useBundledRepo to false.
  2. Set installedRepo to false.
  3. Clear homePathBundledRepo value (keep it blank).
  4. Set repoManagementOwnership to EXTERNAL.
Navigate to the location /kyvosmanager/bin and start Kyvos Manager by executing the start-km.sh command from the terminal.

Switch Repository for Kyvos

To switch Kyvos repository, perform the following steps.

Export Kyvos Repository Dump by running the following command.
pg_dump -U postgres -h <installed_host> -p <port> -d <kyvos_database> -f <kyvos_dump_path> -or- ./pg_dump -c -C --host=localhost --port=45421 --dbname=delverepo --user=postgres > kyvosdbdump.sql
Import Dump to External PostgreSQL by running the following command.
psql -U postgres -h <external_host> -p <port> -d <kyvos_database> -f <kyvos_dump_path>
Log in to Kyvos Manager and navigate to Utilities > Manage Kyvos Repository. From the Management drop-down list, select the Externally Managed option.
Enter the following details: Endpoint, Port, and User Name.
Select the required option for Password Source:
1. Enter a new password and save.
2. Use an existing password from configured Secret.
  Note: When selecting either of these options, you can choose to allow Kyvos to change the repository’s password by selecting the checkbox Enable the option to change repository password in Kyvos Manager after deployment.
Click Test Connection and then click Save.
Stop PostgreSQL by running the following command: sudo systemctl restart postgresql
Start Kyvos Services and log in to Kyvos.