#32254: Support Django Database Password Rotation
-------------------------------------+-------------------------------------
Reporter: jcomish | Owner: nobody
Type: New | Status: new
feature |
Component: Database | Version: 3.1
layer (models, ORM) | Keywords: Password, Database,
Severity: Normal | Rotation
Triage Stage: | Has patch: 0
Unreviewed |
Needs documentation: 0 | Needs tests: 0
Patch needs improvement: 0 | Easy pickings: 0
UI/UX: 0 |
-------------------------------------+-------------------------------------
I use Django with Zappa, and I am trying to implement automated password
rotation of the database password. In a normal environment, I could easily
just restart the Django server and not have much downtime, but I have no
control of that in an AWS Lambda environment, and the downtime required to
rotate my database password will be 15 minutes, since I have to wait for
Lambdas to die out.
There are a couple of different general approaches to support password
rotation with minimal downtime. The easiest is to just try to fetch the
new password if there is an authentication failure. Another approach is to
have two sets of database credentials and switch between them as
necessary. I don't much care about what approach is taken, I just want to
minimize downtime and fully automate rotation.
--
Ticket URL: <https://code.djangoproject.com/ticket/32254>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.
--
You received this message because you are subscribed to the Google Groups
"Django updates" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/django-updates/050.7c1749e405d0090ce2d0e7824cda998f%40djangoproject.com.
