NorskManager.rotateDiscoveryTierSecret() method

One step of rotating the discovery fleet’s tier secret, without a moment when any node’s token is refused:

  • stage: every replica also accepts the new secret (tierSecretAlt; newTierSecret empty, the Manager makes one); - flip: the new secret is presented and mints node tokens, the old one still accepted; every running node is sent its new token; - finish: the old secret is no longer accepted.

Each norsk-mgr runs its replica with the step it reads, so wait for every replica to have taken one before the next. A step out of order is refused (FAILED_PRECONDITION), as is one before any fleet has been published. Returns the fleet in force after the step. Protocol 1.7.

Signature:

rotateDiscoveryTierSecret(step: "stage" | "flip" | "finish", newTierSecret?: string): Promise<DiscoveryFleetInForce>;

Parameters

Parameter Type Description

step

"stage" | "flip" | "finish"

newTierSecret

string

(Optional)

Returns:

Promise<DiscoveryFleetInForce>