search

cloudfoundry / korifi

Cloud Foundry on Kubernetes
Apache License 2.0
311 stars 61 forks source link

[Chore]: Automate secret rotation in korifi #1455

Closed georgethebeatle closed 12 months ago

georgethebeatle commented 2 years ago

Background

It is a good idea to rotate our secrets regularly and we should definitely do so if some of them is compromised or a team member left the team. However this is tedious, so some script that guides us in doing so and automated what is possible to be automated will come in handy.

Action to take

Automate secret rotation in korifi

Impact

We can rotate secrets relatively quickly and hassle-free

Dev Notes

We have already created such a script for eirini, so it can serve as a reference. No link is provided since it is not on a public repo.

georgethebeatle commented 12 months ago

Given the current staffing of the team we do not do that too frequently so we don't need to automate it