redhat-developer / kam

GitOps Application Manager: An opinionated CLI that generates the Kubernetes resources for managing your Tekton-based CI manifests, ArgoCD-based CD manifests and Application manifests in Git.
Apache License 2.0
145 stars 83 forks source link

Add documentation for CI secret rotation #164

Closed amitkrout closed 2 years ago

amitkrout commented 3 years ago

Over a quarters that we have added secrets like github token, username, password etc in CI. There might be a chance that these secrets have leaked. To avoid such threat we should keep rotating our secrete in certain duration gap.

I will create the steps and document in ci-reference.md file