nodered says it reads its API token and admin password at start, so the mesh may rotate them (hq 180) #201

Merged

mesh-admin merged 1 commits from feat/nodered-says-how-its-secrets-are-taken into main

2026-10-01 09:45:32 +00:00

Author	SHA1	Message	Date
jschoubben	6b0164c2ba	nodered says it reads its API token and admin password at start, so the mesh may rotate them (hq 180) Both land in settings.js and the runtime's config file, and the containers that read them restart on those files; a rotation is a new value and a restart. The broker credential says nothing yet: its other party is the bus, and that rotation is the two-party form.	2026-10-01 11:44:29 +02:00

Author

SHA1

Message

Date

jschoubben

6b0164c2ba

nodered says it reads its API token and admin password at start, so the mesh may rotate them (hq 180)

Both land in settings.js and the runtime's config file, and the containers that read them restart
on those files; a rotation is a new value and a restart. The broker credential says nothing yet: its
other party is the bus, and that rotation is the two-party form.

2026-10-01 11:44:29 +02:00