Requirement

As a Jaeger operator, I want to be able to authenticate with API keys, such that I can more easily rotate my secrets without incurring downtime.

In my enterprise, passwords must be rotated on a regular basis. However, when they are, because only one password can be active at a time, it incurs downtime after the password has been rotated on the server side but not yet on the client side. With API keys, we can create an API key, rotate it on the client side, and then delete the old API key.

Problem

With API keys, we can create an API key, rotate it on the client side, and then delete the old API key, thus avoiding downtime.

Proposal

No response

Open questions

No response