From df0863f781cd859d88e0af99cbda3b75a236b0a2 Mon Sep 17 00:00:00 2001 From: Patrick Donnelly Date: Tue, 18 Jun 2024 14:07:31 -0400 Subject: [PATCH] doc: add documentation for `ceph auth rotate` Signed-off-by: Patrick Donnelly (cherry picked from commit b871bbebe0253d4c59a737b0d82992679a8baf02) --- doc/rados/operations/user-management.rst | 14 ++++++++++++++ 1 file changed, 14 insertions(+) diff --git a/doc/rados/operations/user-management.rst b/doc/rados/operations/user-management.rst index 62ad41feb55ea..cd8e378fa9d2d 100644 --- a/doc/rados/operations/user-management.rst +++ b/doc/rados/operations/user-management.rst @@ -748,6 +748,20 @@ You may also :ref:`Modify user capabilities` directly results to a keyring file, and then import the keyring into your main ``ceph.keyring`` file. + +Key rotation +------------ + +To rotate the secret for an entity, use: + +.. prompt:: bash # + + ceph auth rotate + +This avoids the need to delete and recreate the entity when its key is +compromised, lost, or scheduled for rotation. + + Command Line Usage ================== -- 2.39.5