Rotation of secrets
KDT allows you to rotate the secrets that are used to connect to the Kubernetes cluster, to the infrastructure components of Kaspersky Next XDR Expert, and to the DBMS. The rotation period of these secrets can be specified in accordance with the information security requirements of your organization. Secrets are located on the administrator host.
Secrets that are used to connect to the Kubernetes cluster include a client certificate and a private key. Secrets for access to the Registry and DBMS include the corresponding DSNs.
To rotate the secrets for connection to the Kubernetes cluster manually,
On the administrator host where the KDT utility is located, run the following command:
./kdt invoke bootstrap --action RotateK0sConfig
New secrets for connection to the Kubernetes cluster are generated.
When updating Bootstrap, secrets for connection to the Kubernetes cluster are updated automatically.
To rotate the secrets for connection to the Registry manually,
On the administrator host where the KDT utility is located, run the following command:
./kdt invoke bootstrap --action RotateRegistryCreds
New secrets for connection to the Registry are generated.
