Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add Example for Rotation Windows #378

Open
wants to merge 2 commits into
base: main
Choose a base branch
from

Conversation

undefinedhuman
Copy link

Rotation windows

Summary

This MR adds a new example to the documentation showcasing how to implement rotation windows using the time_rotating resource.

Usage scenario

An organization is managing access to sensitive systems using time-limited tokens for security reasons. The tokens are used to authenticate with an external API (e.g., Grafana, AWS, or another cloud service). To maintain security:

  • Tokens must be rotated frequently to reduce the risk of compromise.
  • There should be no downtime during token rotation to ensure uninterrupted service.

Challenges without overlapping rotation windows

  • Service Downtime: If a token expires before a new one becomes available, dependent systems will face authentication failures.
  • Race Conditions: During token rotation, a lack of coordination can cause systems to use an expired token while waiting for the new one.
  • Operational Complexity: Manual or poorly timed token updates require more monitoring and introduce potential errors.

Community Note

  • Please vote on this pull request by adding a 👍 reaction to the original pull request comment to help the community and maintainers prioritize this request
  • Please do not leave "+1" or other comments that do not add relevant new information or questions, they generate extra noise for pull request followers and do not help prioritize the request

@undefinedhuman undefinedhuman requested a review from a team as a code owner January 8, 2025 19:47
Copy link

hashicorp-cla-app bot commented Jan 8, 2025

CLA assistant check
All committers have signed the CLA.

Copy link

CLA assistant check

Thank you for your submission! We require that all contributors sign our Contributor License Agreement ("CLA") before we can accept the contribution. Read and sign the agreement

Learn more about why HashiCorp requires a CLA and what the CLA includes

Have you signed the CLA already but the status is still pending? Recheck it.

@github-actions github-actions bot added the size/M label Jan 8, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant