3 ms·
> The right time to access secret stores is just before you start the container as part of the deploy process or vm startup in cloud environments. So how do yo
by jen20 2y ago
> The right time to access secret stores is just before you start the container as part of the deploy process or vm startup in cloud environments.
So how do you rotate secrets without bouncing app servers..?!
- lucasyvas 2y agoYou don’t - you bounce the servers because it’s simpler. If your secret is static for the lifetime of a deployment - just redeploy to get a new value. I like secret stores but only when the value of something regularly changes in a way that redeploying becomes unacceptable.
- jen20 2y agoBouncing things is often unacceptably expensive - caches, consensus and the cost of data redistribution etc are all good reasons to have hot configuration for secrets.