coulomb/key-cape
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

ops: restart identity provisioner during keycape rotation

Browse source 
Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a02e3f-7301-7622-9be1-12e5f352881c
This commit is contained in:
tegwick 2026-08-23 14:42:44 +02:00
parent 6a996bd71e
commit 93704fd242
2 changed files with 17 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

4
tools/rotate-live-exposed-secret.sh
View file

@ -248,6 +248,10 @@ kubectl set env deployment/lldap -n sso LLDAP_FORCE_LDAP_USER_PASS_RESET- >/dev/
lldap_force_reset_active=false
kubectl rollout status deployment/lldap -n sso --timeout=180s
echo "rotation: restarting identity-provisioner consumer"
kubectl rollout restart deployment/identity-provisioner -n sso >/dev/null
kubectl rollout status deployment/identity-provisioner -n sso --timeout=180s
echo "rotation: updating Authelia and KeyCape consumers"
authelia_patch="$work_dir/patch-authelia.json"
ldap_b64="$(base64 -w0 <"$work_dir/lldap-bind-password")"