help wantedkind/featurekind/proposallifecycle/frozenpriority/backlogtriage/accepted
倉庫指標
- 星標
- (4,267 顆星)
- PR 合併指標
- (平均合併 3天 1小時) (30 天內合併 114 個 PR)
描述
User Story
As a developer I would like to setup a rotation mechanism service account private keys for security. Rotating RSA-2048 keys is essential if I use the SA key to sign projected service-bound tokens.
Detailed Description
I would like CAPI to:
- Create the new key pair.
- Allow the user to create a mechanism in which it can intercept the newly generated key-pair so it can update internal systems before it is rolled out.
- Run machine repave with no downtime. (eg publishing public key first and then private key through 2 machine repaves).
Anything else you would like to add:
N/A
/kind feature