Open tpoland opened 2 years ago
A workaround for this issue is to set any static secrets to their current value and then use the --older-than filter to exclude them.
:) Other workaround could also now be this: https://github.com/starkandwayne/carousel/pull/9
During a rotate operation, passwords that are statically set cannot be regenerated, only generated passwords can be regenerated. There doesn't appear to be a way to skip the statically set values during a rotate operation and this causes the rotate to exit.
Failure to rotate statically set secrets should be a warning not an error.