Allow secretKey rotations
Nobody has claimed this yet.
Assessment
- Difficulty
- 5/5
- Estimated time
- Over a week
- Newbie friendliness
- 25/100
- Issue type
- Feature
- Clarity
- Needs clarification
- Activity status
- Stale
- Tech stack
- kubernetes, rust
- Domain
- infrastructure, security
Research direction
Start by reading the reconciliation flow that manages SECRET_KEY and the documented superset re-encrypt-secrets command. Trace how PREVIOUS_SECRET_KEY and the superset_credentials secret are currently handled during reconciliation. Done should include a decided and implemented rotation workflow that re-encrypts secrets safely without requiring manual reconciliation pauses.
Written by the indexing model from the issue text.
Description
Current Situation
According to superset docs on secretKeys you should be able to rotate keys to encrypt your database and session cookies.
Currently you'd need to manually add PREVIOUS_SECRET_KEY and add the new SECRET_KEY env variable ( while reconciliation paused ) and run superset re-encrypt-secrets on your own in pod. When succeeded, you can unpause reconciliation and add the new SECRET_KEY to your superset_credentials secret.
Proposal
The operator should be able at reconciliation to decide weather to re-encrypt. Ideally, we can automatically rotate this key.
- Dominant language
- Rust
- Stars
- 35
- Forks
- 4
- Avg merge
- 12h 20m
- Merged PRs (30d)
- 10
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from stackabletech/superset-operator
-
customer-request
Difficulty 4/5 3-5 days Newbie friendliness 55/100
-
OPA roles are only resolved at login, so role changes and offboarding don't reach live sessions Open
Difficulty 4/5 3-5 days Newbie friendliness 48/100
-
Difficulty 4/5 3-5 days Newbie friendliness 35/100
stackabletech/superset-operator#667 · 1 comment ·
-
Difficulty 4/5 3-5 days Newbie friendliness 28/100
stackabletech/superset-operator#661 · 4 comments ·
-
type/feature-new
Difficulty 5/5 Over a week Newbie friendliness 25/100
stackabletech/superset-operator#616 · 2 comments ·
All issues in stackabletech/superset-operator
Similar issues
-
Difficulty 2/5 1-3 hours Newbie friendliness 75/100
TheLarkInn/aipm#2413 ·
-
documentation
Difficulty 1/5 Under an hour Newbie friendliness 90/100
alexgorbatchev/simple-ptt#15 ·
-
tooling
Difficulty 2/5 1-3 hours Newbie friendliness 75/100
-
todo:ticket
Difficulty 2/5 1-3 hours Newbie friendliness 70/100
-
Difficulty 2/5 1-3 hours Newbie friendliness 75/100
taikoxyz/taiko-mono#22168 · 1 comment ·