gardener / gardener-extension-provider-azure

Gardener extension controller for the Azure cloud provider (https://azure.microsoft.com).
https://gardener.cloud
Apache License 2.0
10 stars 81 forks source link

Periodically rotate etcd storage account secret #984

Open AndreasBurger opened 1 month ago

AndreasBurger commented 1 month ago

How to categorize this PR?

/area security /kind enhancement /platform azure

What this PR does / why we need it: Rotate the key used to authenticate with the storage account for etcd-backups periodically.

Which issue(s) this PR fixes: Fixes #

Special notes for your reviewer:

Release note:

Credentials used for ETCD backups will now be periodically rotated.
AndreasBurger commented 1 month ago

Some small last-minute changes, nothing functional so good to review. Will run another final test after reviews are done.

gardener-robot commented 1 week ago

@AndreasBurger You need rebase this pull request with latest master branch. Please check.