[Django] #32254: Support Django Database Password Rotation

33 views
Skip to first unread message

Django

unread,
Dec 9, 2020, 11:51:50 PM12/9/20
to django-...@googlegroups.com
#32254: Support Django Database Password Rotation
-------------------------------------+-------------------------------------
Reporter: jcomish | Owner: nobody
Type: New | Status: new
feature |
Component: Database | Version: 3.1
layer (models, ORM) | Keywords: Password, Database,
Severity: Normal | Rotation
Triage Stage: | Has patch: 0
Unreviewed |
Needs documentation: 0 | Needs tests: 0
Patch needs improvement: 0 | Easy pickings: 0
UI/UX: 0 |
-------------------------------------+-------------------------------------
I use Django with Zappa, and I am trying to implement automated password
rotation of the database password. In a normal environment, I could easily
just restart the Django server and not have much downtime, but I have no
control of that in an AWS Lambda environment, and the downtime required to
rotate my database password will be 15 minutes, since I have to wait for
Lambdas to die out.

There are a couple of different general approaches to support password
rotation with minimal downtime. The easiest is to just try to fetch the
new password if there is an authentication failure. Another approach is to
have two sets of database credentials and switch between them as
necessary. I don't much care about what approach is taken, I just want to
minimize downtime and fully automate rotation.

--
Ticket URL: <https://code.djangoproject.com/ticket/32254>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.

Django

unread,
Dec 10, 2020, 12:33:40 AM12/10/20
to django-...@googlegroups.com
#32254: Support Django Database Password Rotation
-------------------------------------+-------------------------------------
Reporter: jcomish | Owner: nobody
Type: New feature | Status: closed
Component: Database layer | Version: 3.1
(models, ORM) |
Severity: Normal | Resolution: duplicate
Keywords: Password, Database, | Triage Stage:
Rotation | Unreviewed
Has patch: 0 | Needs documentation: 0

Needs tests: 0 | Patch needs improvement: 0
Easy pickings: 0 | UI/UX: 0
-------------------------------------+-------------------------------------
Changes (by Mariusz Felisiak):

* status: new => closed
* resolution: => duplicate


Comment:

Duplicate of #30178.

--
Ticket URL: <https://code.djangoproject.com/ticket/32254#comment:1>

Reply all
Reply to author
Forward
0 new messages