[Feature request] Expiring access keys #832

New issue

Open

opened 2024-06-05 03:21:50 +00:00 by jade · 1 comment

jade commented

2024-06-05 03:21:50 +00:00

It would be possible to just write a simple script that makes a key with name ephemeral-${date} and a timer to delete all such keys that are too old, but that is a workaround.

I would love to be able to create access keys that expire in like an hour. The reason I want to be able to do this is that long-lived secrets are a liability, and so I want to write a program that just logs into the garage server via ssh and makes a key on the spot, which then gets expired later. It would be possible to just write a simple script that makes a key with name `ephemeral-${date}` and a timer to delete all such keys that are too old, but that is a workaround.