Skip to content

[feature]: Update Redis to use x.509 certs for authentication #374

@fullykubed

Description

@fullykubed

The username + password auth in redis has a few downsides:

  • Password rotation is very tricky b/c only one password can be "active" at any given time. When coupled with the fact that each node manages its own auth independently, this can cause issues during password rotations.
  • Since each node manages its own auth independently, integration with Vault is very tricky.
  • Usernames and passwords are fairly difficult to debug. Unlike certs, they do not care metadata about issue and expiration time.

As a result, we are changing the standard auth paradigm to use x.509 certificates.

Metadata

Metadata

Assignees

No one assigned

    Labels

    featureA new feature request

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions