feat(ql3): validate cluster credential key rotation

2026-09-22 19:29:13 +08:00 · 2026-08-26 03:31:13 +08:00
parent b45a5e04b7
commit ac0992081e
23 changed files with 1119 additions and 167 deletions
@@ -175,7 +175,8 @@ metadata:
  namespace: qinglong3-system
 type: Opaque
 stringData:
-  api-credential-pepper: REPLACE_WITH_CANONICAL_32_BYTE_BASE64URL
+  api-credential-pepper-keyring.json: |
+    {"schemaVersion":1,"activePepperKeyId":"REPLACE_WITH_ACTIVE_KEY_ID","keys":[{"pepperKeyId":"REPLACE_WITH_ACTIVE_KEY_ID","pepper":"REPLACE_WITH_CANONICAL_32_BYTE_BASE64URL"}]}
 ---
 apiVersion: v1
 kind: Secret