help wantedkind/featurekind/proposallifecycle/frozenpriority/backlogtriage/accepted
Repository metrics
- Stars
- (4,267 個のスター)
- PR merge metrics
- (PR metrics pending)
説明
User Story
As a developer I would like to setup a rotation mechanism service account private keys for security. Rotating RSA-2048 keys is essential if I use the SA key to sign projected service-bound tokens.
Detailed Description
I would like CAPI to:
- Create the new key pair.
- Allow the user to create a mechanism in which it can intercept the newly generated key-pair so it can update internal systems before it is rolled out.
- Run machine repave with no downtime. (eg publishing public key first and then private key through 2 machine repaves).
Anything else you would like to add:
N/A
/kind feature