Include Local Password Policy Configuration in MAS CLI Backup and Restore

MAS CLI version: 23.7.2

We would like to request an enhancement to include the local password policy configuration in MAS CLI backup and restore operations.

With the current implementation, when MAS Core is restored from a backup created using mas backup, the local password policy settings are reset to their default values.

According to the information we received from Maximo Support, the local password policy configuration is stored in the [MAS instance name]-password-policy Secret. However, this Secret is not currently included in the backup. Consequently, after running mas restore, the password policy configuration is lost and reverts to the default settings.

This can have a direct impact on existing users. For example, if the configured minimum password length is shorter than the default value, users whose current passwords do not meet the restored default minimum length may no longer be able to log in after the restore.

Because the local password policy is an important MAS configuration setting, we believe that excluding it from the MAS Core backup is undesirable behavior. The backup and restore process should preserve this configuration so that the restored environment maintains the same password policy as the original environment.

We therefore request that the [MAS instance name]-password-policy Secret, or the relevant password policy configuration, be included in future MAS CLI backup and restore operations.