luxolus
/
open-nomad
2
0
Fork 0
Code Issues 1 Pull Requests Packages Releases Wiki Activity
open-nomad/.changelog/15009.txt

Ignoring revisions in .git-blame-ignore-revs. Click here to bypass and see the normal blame view.

8 lines
226 B
Plaintext
Raw Permalink Normal View History

keyring: fix missing GC config, don't rotate on manual GC (#15009) The configuration knobs for root keyring garbage collection are present in the consumer and present in the user-facing config, but we missed the spot where we copy from one to the other. Fix this so that users can set their own thresholds. The root key is automatically rotated every ~30d, but the function that does both rotation and key GC was wired up such that `nomad system gc` caused an unexpected key rotation. Split this into two functions so that `nomad system gc` cleans up old keys without forcing a rotation, which will be done periodially or by the `nomad operator root keyring rotate` command.
2022-10-24 12:43:42 +00:00
```release-note:bug
keyring: Fixed a bug where root keyring garbage collection configuration values were not respected.
```
```release-note:bug
keyring: Fixed a bug where `nomad system gc` forced a root keyring rotation.
```