Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[ADR] Select a credential rotation solution for Mattermost #35

Open
Racer159 opened this issue Mar 4, 2024 · 2 comments
Open

[ADR] Select a credential rotation solution for Mattermost #35

Racer159 opened this issue Mar 4, 2024 · 2 comments
Labels
enhancement ✨ New feature or request needs-adr This issue or PR needs an ADR

Comments

@Racer159
Copy link
Contributor

Racer159 commented Mar 4, 2024

Is your feature request related to a problem? Please describe.

As Ashton I want to be able to rotate Mattermost credentials safely so that I can meet IA requirements and build a more secure system.

Describe the solution you'd like

We should determine a way to automate the rotation of credentials for Mattermost so that we can reduce the cognitive load in doing these rotations. This should include:

  • K8s secrets
  • CA certificates
  • Admin account creds
  • RDS and any hard creds for dependencies

These should be written in a simple ADR to capture why the final solution was chosen and a follow on implementation issue should be created.

Additional context

This is needed to meet IA requirements and we should do this in as automated a way as possible likely using Zarf, UDS CLI or Pepr.

@Racer159 Racer159 added enhancement ✨ New feature or request needs-adr This issue or PR needs an ADR labels Mar 4, 2024
@Racer159 Racer159 changed the title [ADR] Select a credential rotation solution for Mattermost (skewed to UDS Prod) [ADR] Select a credential rotation solution for Mattermost Mar 5, 2024
@oates
Copy link
Contributor

oates commented Apr 1, 2024

needs spike

@Racer159
Copy link
Contributor Author

Racer159 commented Apr 2, 2024

blocked on defenseunicorns/uds-software-factory#45

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement ✨ New feature or request needs-adr This issue or PR needs an ADR
Projects
None yet
Development

No branches or pull requests

2 participants