Re: Expand the Scope of Pluggable Secret Keys Ticket

[Adam Johnson]

This should be a separate ticket.

I'm not sure what you need for DB credential rotation - this can already be
done by creating a second user in your database, then changing Django's
config to use the new one, then deleting the old one.

On Thu, 8 Aug 2019 at 02:43, John Gooding  wrote:

> Would it be possible to expand the scope of the recently accepted secret
> key rotation ticket to include the ability to live rotate other credentials
> as well, such as the DB credentials?
>
> Or would this be a separate thing all together?
>
>
> https://groups.google.com/forum/#!searchin/django-developers/secret$20keys%7Csort:date/django-developers/jg-eu3HtLHI/V_rbzYKfAQAJ
>
> https://code.djangoproject.com/ticket/30360
>
> --
> You received this message because you are subscribed to the Google Groups
> "Django developers (Contributions to Django itself)" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to django-developers+unsubscr...@googlegroups.com.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/django-developers/4271925d-6198-4847-80a1-fe453a6e4313%40googlegroups.com
> 
> .
>


-- 
Adam

-- 
You received this message because you are subscribed to the Google Groups 
"Django developers  (Contributions to Django itself)" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to django-developers+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-developers/CAMyDDM1cyxyZBexL1mp_cmis-SWPRqgRORMWV6%2Bfq%3DtmjLo93g%40mail.gmail.com.

Re: Expand the Scope of Pluggable Secret Keys Ticket

[Carlton Gibson]

Hi John, 

I'm inclined towards "separate thing all together". Maybe they're all 
related but the bigger a ticket gets the less chance it has of actually 
appearing... 

> ... DB credentials...

Let's say you put those in environment variables... Don't you just relaunch 
with a new environment to "rotate"? i.e. What special handling would Django 
need to provide?

Kind Regards,

Carlton


On Thursday, 8 August 2019 03:43:49 UTC+2, John Gooding wrote:
>
> Would it be possible to expand the scope of the recently accepted secret 
> key rotation ticket to include the ability to live rotate other credentials 
> as well, such as the DB credentials?
>
> Or would this be a separate thing all together? 
>
>
> https://groups.google.com/forum/#!searchin/django-developers/secret$20keys%7Csort:date/django-developers/jg-eu3HtLHI/V_rbzYKfAQAJ
>
> https://code.djangoproject.com/ticket/30360
>

-- 
You received this message because you are subscribed to the Google Groups 
"Django developers  (Contributions to Django itself)" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to django-developers+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-developers/42ac8575-415b-4b5a-a687-d23ca72ec305%40googlegroups.com.