search

zalando-stups / mint-worker

The secret rotator and distributor for the STUPS ecosystem
http://stups.readthedocs.org/en/latest/components/mint.html
Other
9 stars 3 forks source link

Distribute password rotations more smoothly #22

Open harti2006 opened 8 years ago

harti2006 commented 8 years ago

The hard deadline of 120 min for password expiration, sometimes leads to all passwords being rotated at the same time (especially when mint-worker was down for a while and all passwords expired). Afterwards they are valid for the next two hours and the worker is basically idle.

If many passwords expire at the same time, the mint-worker should not try to rotate them all at once, but distribute them more smoothly, to have an almost constant workload all the time and avoid peaks.

hjacobs commented 8 years ago

:+1: maybe some randomization could help

harti2006 commented 8 years ago

@hjacobs yes, or limiting the number of passwords, that are rotated with one job run.