influxdata / influxdata/docs-v2

Token rotation and management scenarios

Open
#2,999 0 comments 0 reactions 0 assignees View on GitHub
InfluxDB 3 Core and Enterprise InfluxDB v3
Dominant language
JavaScript
Stars
82
Forks
326
Avg merge
1d 1h
Merged PRs (30d)
82

Description

## Use the CLI or API to manage tokens for InfluxDB

Document best practices for token lifecycle management within and across InfluxDB editions

- Token issuance, revocation, and rotation
- Edge data and aggregation scenarios
- Within and across editions (on-prem <> edge <> cloud)
- Should we delete the authorization when we expire the tokens or mark them as Inactive and the deletion is done by InfluxDB management?

### Example scenarios

> In order to rotate the token. you may want to:
a) generate the new token with the appropriate permissions
b) begin the distribute the token to the various servers….which takes time. This means that BOTH tokens are active while this occurs.
c) when you believe that the token has been distributed to all 100 servers….disable/deactivate the original token.
d) it is possible that some servers didn’t get their token rotated successfully…so you may want to re-activate the original token while you investigate. (i.e. running a count() returns less than 100 when you disabled the original token….you figure out which servers dropped out…and investigate. Perhaps a server remains offline, etc.)
e) once you’ve confirmed everything is working….delete the old token.

### Future enhancements

- Database user management?

Contributor guide

No contributing guide indexed for this repository

Research direction

Start with the CLI and API token-management entry points, then compare token lifecycle behavior across InfluxDB on-prem, edge, and cloud editions. Document issuance, overlapping rotation, deactivation, reactivation, revocation, and deletion guidance, including the 100-server distribution scenario and the unresolved authorization question.

Written by the indexing model from the issue text.

Assessment

Domain
authentication, documentation, security
Issue type
Documentation
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.