Categorygithub.com/openshift/ci-toolscmdserviceaccount-secret-rotation-trigger
package
0.0.0-20250403192851-34a345b3f333
Repository: https://github.com/openshift/ci-tools.git
Documentation: pkg.go.dev

# README

serviceaccount-secret-rotation-trigger

A small tool that will take a list of namespaces and:

  • Add a TTL annotation to all serviceaccount secrets in them with a value of now + 24h: This will trigger the serviceaccount_secret_refresher controller to delete them as soon as that TTL is in the past
  • Will update all ServiceAccounts in those namespaces to have empty Secrets and ImagePullSecrets fields: This will trigger an immediate recreation of those secrets by the corresponding minters