If I lose the auto-generated KOTS admin password for the embedded install or forgot what I set it for existing install, how do I go about resetting these?
The admin password is stored as a bcrypt value so once set it cannot be read back, the only way to recover is to reset it.
kubectl kots reset-password <namespace>
This is also valid syntax to change the password:
kubectl kots reset-password -n <namespace>
NOTE: for embedded clusters the namespace is