ForgeRock / ds-operator

ForgeRock Directory Service Operator
Other
8 stars 12 forks source link

Dev #24

Closed wstrange closed 3 years ago

wstrange commented 3 years ago

The ds-operator will now check and reconcile the service account passwords every 5 min (or immeditialy on first deploy).

The existing password is first checked against the secret, and only if it fails will the operator attempt to change the password.

This will sync any password changes every 5 minutes. Note that that many other applications may need to be restarted on a password change, especially if they mount the secret containing the password.

In general, it is not recommended to frequently change or rotate the passwords.

wstrange commented 3 years ago

/gcbrun