rotate: narrow a pair credential to one consuming module (hq issue 268) #75

Merged

mesh-admin merged 1 commits from feat/rotate-one-consuming-module into main

2026-10-06 00:25:31 +00:00

Author	SHA1	Message	Date
jochen	f8286c063d	rotate: narrow a pair credential to one consuming module (hq issue 268) A machine runs many consumers of one provision, each with its own credential. When one module leaks its credential, `rotate <provision> --consumer <machine>` was the narrowest act and replaced every module's on that machine, restarting all of them. --module (and the verb's module argument beside provision) rotates only that module's.	2026-10-06 02:13:48 +02:00

Author

SHA1

Message

Date

jochen

f8286c063d

rotate: narrow a pair credential to one consuming module (hq issue 268)

A machine runs many consumers of one provision, each with its own
credential. When one module leaks its credential, `rotate <provision>
--consumer <machine>` was the narrowest act and replaced every module's
on that machine, restarting all of them. --module (and the verb's
module argument beside provision) rotates only that module's.

2026-10-06 02:13:48 +02:00