Rotating shared secrets
To avoid service interruptions, the Sideband API allows multiple, distinct shared secrets to be accepted at the same time.
About this task
You can configure a new shared secret that the Sideband API accepts alongside an existing shared secret. This allows time to update the API gateway plugin to use the new shared secret.
Steps
-
Create a new Sideband API Shared Secret and assign it to the Sideband API HTTP Servlet Extension. For more information, see Creating a shared secret.
-
Update the API gateway plugin to use the new shared secret.
-
Remove the previous Sideband API Shared Secret. For more information, see Deleting a shared secret.