sean/seanfarm
Watch
1
0
Fork
You've already forked seanfarm
 0
Code Issues Pull requests Projects Releases 386 Packages Wiki Activity

security: retire exposed Zot storage identity #67

Merged
binjovi-bot merged 1 commit from security/retire-zot-storage-identity into trunk 2026-08-29 18:26:44 +00:00
Conversation 0 Commits 1 Files changed 3 +86 -68
sean commented 2026-08-29 18:25:12 +00:00
Owner
Copy link

Complete the three-phase Zot MinIO credential rotation after the v2 identity passed scope proof, bucket initialization, a full Zot restart, and public immutable-manifest reads. Stop generating or converging the exposed v1 identity. Add an idempotent retirement Job that removes user zot and fails if authority remains.

Tests: targeted rotation contract, full seanfarm checks, and tenantbucket render pass.

Complete the three-phase Zot MinIO credential rotation after the v2 identity passed scope proof, bucket initialization, a full Zot restart, and public immutable-manifest reads. Stop generating or converging the exposed v1 identity. Add an idempotent retirement Job that removes user `zot` and fails if authority remains. Tests: targeted rotation contract, full seanfarm checks, and tenantbucket render pass.
security: retire exposed Zot storage identity
All checks were successful
binjovi/ci Binjovi completed the frozen plan
Details
4cff0af174
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
sean/seanfarm!67
No description provided.