Skip to content

Resolve "Secrets get accidentially rotated"

Maarten de Waard requested to merge 891-secrets-get-accidentially-rotated into master

I added a python script that generates secrets. Currently it does secret generation when a secret does not exist in the cluster yet. The secrets are generated from Jinja templates.

It does not (yet) do:

  • Add passwords to already existing secrets if the secret and the template do not match
  • Add oauth secrets for new apps when they would be added to OAS

But I think those two things can be added when we need it.

I chose to do this in a Python script so we can easily move the logic to the Admin panel once it's ready.

Closes #891 (closed)

Edited by Maarten de Waard

Merge request reports