# secret rotation

Published articles for secret rotation.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## Managing Environment Variables and Secrets in DevOps

DevFeed: [Managing Environment Variables and Secrets in DevOps](<https://devfeed.tech/articles/managing-environment-variables-and-secrets-in-devops-17486.md>)

Original publisher: [Read original article](<https://kodekloud.com/blog/managing-environment-variables-and-secrets-devops/>)

Author: Pramodh Kumar M

Published: 2026-08-01T13:00:47Z

Content type: tutorial

Language: en

Sources: [Kubernetes - KodeKloud Blog | DevOps, Cloud, Kubernetes, AI Tutorials & More](<https://devfeed.tech/sources/kubernetes-kodekloud-blog-devops-cloud-kubernetes-ai-tutorials-more.md>)

Topics: [DevOps](<https://devfeed.tech/topics/devops.md>), [configuration](<https://devfeed.tech/topics/configuration.md>), [GitGuardian](<https://devfeed.tech/topics/gitguardian.md>), [GitHub](<https://devfeed.tech/topics/github.md>), [Terraform](<https://devfeed.tech/topics/terraform.md>), [Kubernetes](<https://devfeed.tech/topics/kubernetes.md>)

Tags: [ci-cd-secrets-management](<https://devfeed.tech/tags/ci-cd-secrets-management.md>), [cloud](<https://devfeed.tech/tags/cloud.md>), [collaboration](<https://devfeed.tech/tags/collaboration.md>), [collaboration-tools](<https://devfeed.tech/tags/collaboration-tools.md>), [configuration](<https://devfeed.tech/tags/configuration.md>), [container](<https://devfeed.tech/tags/container.md>), [crash](<https://devfeed.tech/tags/crash.md>), [devops](<https://devfeed.tech/tags/devops.md>), [devsecops](<https://devfeed.tech/tags/devsecops.md>), [dynamic-secrets](<https://devfeed.tech/tags/dynamic-secrets.md>), [env-file-security](<https://devfeed.tech/tags/env-file-security.md>), [environment-variables](<https://devfeed.tech/tags/environment-variables.md>), [gitguardian](<https://devfeed.tech/tags/gitguardian.md>), [github](<https://devfeed.tech/tags/github.md>), [hardcoded-credentials](<https://devfeed.tech/tags/hardcoded-credentials.md>), [hashicorp-vault](<https://devfeed.tech/tags/hashicorp-vault.md>), [jira](<https://devfeed.tech/tags/jira.md>), [kubernetes](<https://devfeed.tech/tags/kubernetes.md>), [kubernetes-secrets](<https://devfeed.tech/tags/kubernetes-secrets.md>), [leak](<https://devfeed.tech/tags/leak.md>), [managing-environment-variables-and-secrets](<https://devfeed.tech/tags/managing-environment-variables-and-secrets.md>), [rotation](<https://devfeed.tech/tags/rotation.md>), [safety](<https://devfeed.tech/tags/safety.md>), [sealed-secrets](<https://devfeed.tech/tags/sealed-secrets.md>), [secret-rotation](<https://devfeed.tech/tags/secret-rotation.md>), [secret-scanning](<https://devfeed.tech/tags/secret-scanning.md>), [secrets](<https://devfeed.tech/tags/secrets.md>), [secrets-management-best-practices](<https://devfeed.tech/tags/secrets-management-best-practices.md>), [security](<https://devfeed.tech/tags/security.md>), [storage](<https://devfeed.tech/tags/storage.md>), [terraform](<https://devfeed.tech/tags/terraform.md>), [vault](<https://devfeed.tech/tags/vault.md>)

### AI overview

A guide to managing environment variables and secrets in DevOps. It explains how secrets escape through repositories, processes, crash reports, containers, collaboration tools, Kubernetes Secrets, and Terraform state, and discusses storage, access controls, lifecycles, and rotation.

### Source excerpt

Nearly 29 million secrets were pushed to public GitHub in a single year, and most teams still discover their own leaks by accident. Here is how environment variables actually escape, and what to use instead at each stage.

## Introducing ESC Secret Rotation Webhooks

DevFeed: [Introducing ESC Secret Rotation Webhooks](<https://devfeed.tech/articles/introducing-esc-secret-rotation-webhooks-19008.md>)

Original publisher: [Read original article](<https://www.pulumi.com/blog/introducing-esc-secret-rotation-webhooks/>)

Author: Sean Yeh

Published: 2026-06-26T00:00:00Z

Content type: release

Language: en

Sources: [Pulumi](<https://devfeed.tech/sources/pulumi.md>)

Topics: [pulumi-esc](<https://devfeed.tech/topics/pulumi-esc.md>), [secret rotation](<https://devfeed.tech/topics/secret-rotation.md>), [notifications](<https://devfeed.tech/topics/notifications.md>), [pulumi-cloud](<https://devfeed.tech/topics/pulumi-cloud.md>), [pulumi-cli](<https://devfeed.tech/topics/pulumi-cli.md>), [TypeScript](<https://devfeed.tech/topics/typescript.md>), [GitHub](<https://devfeed.tech/topics/github.md>)

Tags: [cli](<https://devfeed.tech/tags/cli.md>), [esc](<https://devfeed.tech/tags/esc.md>), [github](<https://devfeed.tech/tags/github.md>), [notifications](<https://devfeed.tech/tags/notifications.md>), [product](<https://devfeed.tech/tags/product.md>), [pulumi](<https://devfeed.tech/tags/pulumi.md>), [pulumi-cli](<https://devfeed.tech/tags/pulumi-cli.md>), [pulumi-cloud](<https://devfeed.tech/tags/pulumi-cloud.md>), [rotation](<https://devfeed.tech/tags/rotation.md>), [secret-rotation](<https://devfeed.tech/tags/secret-rotation.md>), [secrets](<https://devfeed.tech/tags/secrets.md>), [slack](<https://devfeed.tech/tags/slack.md>), [typescript](<https://devfeed.tech/tags/typescript.md>), [webhooks](<https://devfeed.tech/tags/webhooks.md>)

### AI overview

Pulumi introduces ESC secret rotation webhooks, which trigger on successful or failed environment secret rotations. They can notify teams in Slack, refresh services using old credentials, and help detect failed rotations before outages.

### Source excerpt

Pulumi ESC centralizes your secrets and configuration, and it can automatically rotate secrets on a schedule so credentials never go stale. But a rotation is only useful if the systems that depend on it know it happened. ESC secret rotation webhooks close that gap by notifying you the moment a secret rotates. Introducing secret rotation webhooks With ESC webhooks, you can react to rotations automatically. When ESC rotates an environment's secrets, a webhook can be configured to trigger on either success or failure. Use it to notify your team in Slack, refresh services that hold the old credential, or catch a failed rotation before it causes an outage. How to configure Pulumi Cloud Console Using the Pulumi Cloud Console, you can now configure webhooks for "Environment rotation succeeded" and "Environment rotation failed" in your ESC Environment's Settings page (under Settings -> Notifications). Pulumi Service Provider You can use the Pulumi Service Provider in your Pulumi program to configure webhooks. Here is an example in TypeScript: const environmentWebhook = new service.Webhook("env-webhook", { active: true, displayName: "env-webhook", organizationName: "my-org", projectName: environment.project, environmentName: environment.name, payloadUrl: "https://example.com", filters: [WebhookFilters.EnvironmentRotationSucceeded, WebhookFilters.EnvironmentRotationFailed], }) Pulumi CLI You can also use the Pulumi CLI to configure the webhook: pulumi env webhook new my-org/project/env env-webhook \ --url https://example.com \ --event environment_rotation_succeeded \ --event environment_rotation_failed Get started Secret rotation webhooks are available now for all Pulumi ESC environments. See the webhooks documentation to get started, and share your feedback on our GitHub repository.

## Keycloak 25.0.2 released

DevFeed: [Keycloak 25.0.2 released](<https://devfeed.tech/articles/keycloak-25-0-2-released-31650.md>)

Original publisher: [Read original article](<https://www.keycloak.org/2024/07/keycloak-2502-released>)

Author: Keycloak Team

Published: 2024-07-18T00:00:00Z

Content type: release

Language: en

Sources: [Keycloak Blog](<https://devfeed.tech/sources/keycloak-blog.md>)

Topics: [Keycloak](<https://devfeed.tech/topics/keycloak.md>), [migration](<https://devfeed.tech/topics/migration.md>), [LDAP](<https://devfeed.tech/topics/ldap.md>), [REST API](<https://devfeed.tech/topics/rest-api.md>), [Quarkus](<https://devfeed.tech/topics/quarkus.md>)

Tags: [health-checks](<https://devfeed.tech/tags/health-checks.md>), [idm](<https://devfeed.tech/tags/idm.md>), [kerberos](<https://devfeed.tech/tags/kerberos.md>), [keycloak](<https://devfeed.tech/tags/keycloak.md>), [keycloak-release](<https://devfeed.tech/tags/keycloak-release.md>), [ldap](<https://devfeed.tech/tags/ldap.md>), [migration](<https://devfeed.tech/tags/migration.md>), [migration-guide](<https://devfeed.tech/tags/migration-guide.md>), [openid-connect](<https://devfeed.tech/tags/openid-connect.md>), [release](<https://devfeed.tech/tags/release.md>), [rest-api](<https://devfeed.tech/tags/rest-api.md>), [saml](<https://devfeed.tech/tags/saml.md>), [secret-rotation](<https://devfeed.tech/tags/secret-rotation.md>), [sso](<https://devfeed.tech/tags/sso.md>), [translation](<https://devfeed.tech/tags/translation.md>)

### AI overview

Keycloak 25.0.2 was released on July 18, 2024. The release includes enhancements to management-interface configuration, Admin REST API documentation, and documentation language, along with fixes across the user interface, LDAP synchronization, authorization, migration, operators, and other components.

### Source excerpt

To download the release go to Keycloak downloads. Upgrading Before upgrading refer to the migration guide for a complete list of changes. All resolved issues Enhancements #30094 Do not inherit 'https-client-auth' property for the management interface #30537 Document how Admin REST API endpoints work with Hostname config docs #30856 Remove inclusive language foreword docs Bugs #19070 authBaseUrl error on different hostname-admin-url, hostname-url admin/ui #26042 Issue when start-dev in 23.0.1 dist/quarkus #28489 Missing help text on tokens tab admin/ui #29407 Need refresh attributes group translations on Users > Details tab admin/ui #29566 User Profile attributes/groups in Admin UI are not translated using Localization for non-master realm when signed in the master realm account/ui #29761 bug: disabling all default features no longer works core #29784 Exception while trying to run a LDAP sync with a group importer and a batch size less then the actual number of groups ldap #30329 Client secret rotation UI shows wrong rotated secret admin/ui #30355 New operator failing on health checks operator #30383 Account Console (v3) no longer highlights the current page in the nav bar account/ui #30436 Client Roles are not shown when clientId property is set admin/ui #30440 UI theme bug in KC 25.0.0 admin/ui #30444 Failed to evaluate permissions when fetchRoles is enabled on role policies authorization-services #30449 Migration stuck if versions incompatible operator #30521 "Client Offline Session Max" no longer available admin/ui #30541 Account UI resources try to load from admin path instead of frontend path account/ui #30552 After migrating from 24 to 25, the signature algorithms names do not display in drop down menu admin/ui #30591 Invalid character in spanish translation file for Identity Provider Link Template translations #30652 Default server port is used instead of the management interface port in the guide about running Keycloak in a container #30662 User policy -> se

## The Birth of the External Secrets Community

DevFeed: [The Birth of the External Secrets Community](<https://devfeed.tech/articles/the-birth-of-the-external-secrets-community-17696.md>)

Original publisher: [Read original article](<https://blog.container-solutions.com/the-birth-of-the-external-secrets-community>)

Author: Lucas Severo Alves

Published: 2021-05-06T07:12:38Z

Content type: article

Language: en

Sources: [Blog - Container Solutions](<https://devfeed.tech/sources/blog-container-solutions.md>)

Topics: [Kubernetes](<https://devfeed.tech/topics/kubernetes.md>), [Maintainers](<https://devfeed.tech/topics/maintainers.md>), [JavaScript](<https://devfeed.tech/topics/javascript.md>)

Tags: [azure](<https://devfeed.tech/tags/azure.md>), [google-cloud](<https://devfeed.tech/tags/google-cloud.md>), [hashicorp-vault](<https://devfeed.tech/tags/hashicorp-vault.md>), [ibm](<https://devfeed.tech/tags/ibm.md>), [javascript](<https://devfeed.tech/tags/javascript.md>), [kubernetes](<https://devfeed.tech/tags/kubernetes.md>), [kubernetes-secrets](<https://devfeed.tech/tags/kubernetes-secrets.md>), [open-source](<https://devfeed.tech/tags/open-source.md>), [secret-rotation](<https://devfeed.tech/tags/secret-rotation.md>), [security](<https://devfeed.tech/tags/security.md>)

### AI overview

This article describes the growth of projects that synchronize secrets from external providers into Kubernetes and the formation of a community around the External Secrets Operator. It highlights GoDaddy's kubernetes-external-secrets project, its provider integrations and active maintenance, while noting that it was developed in JavaScript.

### Source excerpt

Managing secrets in Kubernetes can be a cumbersome job. In a multi-service multi-environment setup, you can end up with hundreds of secrets without even noticing. It is hard to keep track of everything and at the same time manage secret rotation, onboard new services, and onboard new people with correct access permissions.