Service

Rotate the DataHub secret-service encryption key

Changed on

Generates a fresh SECRET_SERVICE_ENCRYPTION_KEY (the key GMS uses to encrypt ingestion source credentials and other sensitive values at rest), re-encrypts every stored secret from the old key to the new one, and then restarts GMS on the new key. Because the stored secrets are migrated in place, ingestion resumes on its own after the restart. USER-VISIBLE SIDE EFFECT: none for API tokens or browser sessions. Ingestion pauses only for the duration of the GMS restart and then continues.

post/project/{project}/service/{service_name}/rotate-secret-service-encryption-key

Request

  • Base URL
    https://api.aiven.io/v1
  • URL
    https://api.aiven.io/v1/project/{project}/service/{service_name}/rotate-secret-service-encryption-key
  • Auth
    HTTP bearer and OAuth 2
    Authorization code: https://console.aiven.io/oauth/authorize
    Token URL: https://api.aiven.io/v1/oauth2/token scopes: services:write

Path parameters

projectstring required

Project name

service_namestring required

Service name

Response

Response

messagestring required

Printable result of the request

Changes