Skip to content

Commit

Permalink
Commit changes made by code formatters
Browse files Browse the repository at this point in the history
  • Loading branch information
github-actions[bot] committed Nov 20, 2023
1 parent b39b0c4 commit 34c0d26
Showing 1 changed file with 1 addition and 2 deletions.
3 changes: 1 addition & 2 deletions runbooks/source/rotate-user-aws-credentials.html.md.erb
Original file line number Diff line number Diff line change
Expand Up @@ -34,7 +34,6 @@ make tools-shell
If the changes involve applying "pingdom_check", set the environment variables for pingdom.
The values are stored as secrets in `manager` cluster - `concourse-main` namespace.


## Target the live cluster

```bash
Expand Down Expand Up @@ -171,7 +170,7 @@ If this looks like it's going to do the right thing, enter 'yes' to confirm.

At this point, a new set of AWS credentials should have been created for the existing IAM user, and the kubernetes secret should contain the new access key and secret.

Note: It is possible that applications might experience downtime if, for example, a pod which was launched with the old password drops the connection to AWS and tries to open a new one (which will fail, because the password is no longer valid).
Note: It is possible that applications might experience downtime if, for example, a pod which was launched with the old password drops the connection to AWS and tries to open a new one (which will fail, because the password is no longer valid).
To make pods pick up the new password, perform a _manual_ rollout on every relevant deployment:
```bash
kubectl rollout restart "deployment/{deployment}" -namespace="{namespace}"
Expand Down

0 comments on commit 34c0d26

Please sign in to comment.