github-actions[bot] opened a new pull request, #70644: URL: https://github.com/apache/airflow/pull/70644
* Document how to rotate the Fernet key with the Helm chart The Helm chart docs explained how to point at a custom Fernet key Secret but never how to safely rotate one. The chart also generates the Fernet key Secret via a pre-install hook, which means it cannot be updated through helm upgrade, so a self-managed Secret plus the standard prepend/rotate/trim procedure is required. Document that gap so operators aren't left guessing or reverse-engineering the chart templates. closes: #18509 * Address review feedback on Fernet key rotation docs Reviewers pointed out three gaps: the plaintext-key warning didn't explicitly say not to commit values.yaml to version control, the kubectl-created Secret example didn't mention that it needs to be managed as infrastructure so it survives a cluster migration or redeploy, and the rotation steps described updating the Secret's value without ever showing the command to do it. Rename the newsfragment to the PR number (70242) instead of the issue number (18509) per towncrier convention. * Address review feedback on Fernet key rotation docs Tighten the wording per reviewer suggestions and drop the newsfragment, since a docs-only addition does not need one. (cherry picked from commit 88f95c706eb4851f3fb5107d0b883c7a87e86b67) Co-authored-by: Aaryan Mahajan <[email protected]> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
