confluent secret file rotate¶
Description¶
This command rotates either the master or data key. To rotate the master key, specify the current master key passphrase flag (“–passphrase”) followed by the new master key passphrase flag (“–passphrase-new”). To rotate the data key, specify the current master key passphrase flag (“–passphrase”).
confluent secret file rotate [flags]
Tip
For examples, see Usage examples.
Flags¶
--master-key Rotate the master key. Generates a new master key and re-encrypts with the new key.
--data-key Rotate data key. Generates a new data key and re-encrypts the file with the new key.
--local-secrets-file string REQUIRED: Path to the encrypted configuration properties file.
--passphrase string Master key passphrase. You can use dash ("-") to pipe from stdin or @file.txt to read from file.
--passphrase-new string New master key passphrase. You can use dash ("-") to pipe from stdin or @file.txt to read from file.
Global Flags¶
-h, --help Show help for this command.
-v, --verbose count Increase verbosity (-v for warn, -vv for info, -vvv for debug, -vvvv for trace).
See Also¶
- confluent secret file - Secure secrets in a configuration properties file.