You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
In the near future, when the entire key rotation task gets done, Pelican will support multiple active private keys and able to create a new private key every hour (or any arbitrary interval). Therefore, the directory containing the private key files will soon be flooded.
It is time to discuss how to rotate out (remove) outdated private keys. For example, How many private keys does the admin want to hold at the same time? How long would the admin want a private key last?
reacted with thumbs up emoji reacted with thumbs down emoji reacted with laugh emoji reacted with hooray emoji reacted with confused emoji reacted with heart emoji reacted with rocket emoji reacted with eyes emoji
-
In the near future, when the entire key rotation task gets done, Pelican will support multiple active private keys and able to create a new private key every hour (or any arbitrary interval). Therefore, the directory containing the private key files will soon be flooded.
It is time to discuss how to rotate out (remove) outdated private keys. For example, How many private keys does the admin want to hold at the same time? How long would the admin want a private key last?
Beta Was this translation helpful? Give feedback.
All reactions