saltstack / saltstack/salt

[Feature] Master Key Rotation for disconnected Minions (laptops)

Open
#59,149 7 comments 0 reactions 1 assignee View on GitHub

@twangboy is already working on this.

Since Dec 15, 2020.

Feature P1 severity-high
Dominant language
Python
Stars
15.7k
Forks
5.6k
Avg merge
2d 44m
Merged PRs (30d)
80

Description

Description

  • Some security shops require key rotation on a periodic basis. We have no easy way to rotate keys... especially if the minion is not connected at the time of rotation.
  • If a minion is offline when the master rotates its key, there is no way to get it after the fact... the minion will not be able to reconnect to the master after the master has rotated its key. This is a problem with Windows Desktops/Laptops that aren't ALWAYS connected to the master.

Suggested solution:

  • Some sort of key management system that allows for expiring and future keys. The system would handle key rotation.

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.