Replication credential rotation

[macbusik]

Hi,
I would like to know if your API supports automatic rotation of Access Key and Secret Access Key for configured replication from Harbor to ECR?

[bupd]

@macbusik I think there is no built-in feature in Harbor that automatically rotates credentials for replication targets.

[macbusik]

it seems like we have use PUT on replication/policies/{id} with new credentials from AWS, so we have to build workflow with around that and it would be automatically :)

[reasonerjt]

@macbusik I'd like to understand the flow of the rotation.
For example, will you update the AK/SK manually? How do you automate the rotation in your env?

Could you open an issue for better tracking the discussion?

[macbusik]

To be honest, I don't know all details and works are postponed little bit right now, but as I know AK/SK will be rotated by AWS Organization, so when automation will be ready I will let you know :)