概述
密钥轮换实现工作流是一个中级难度的工作流。实现密钥定期轮换流程，无停机更换 API 密钥和数据库凭证。该工作流的目标是：Establish a process for regularly rotating secrets without service disruption.
环境准备
执行本工作流需要以下环境：A secrets manager；Application with secrets loaded at runtime；Dual-secret support for zero-downtime rotation。请确保在开始前准备好所有必需的工具和资源，以避免中途因环境问题中断。
执行步骤
本工作流包含5个步骤。步骤1：Inventory secrets——List all secrets used by the application and their rotation requirements. 步骤2：Enable dual secrets——Update the application to support both old and new secrets simultaneously. 步骤3：Create new secrets——Generate new secret values and store them in the secrets manager alongside the old ones. 步骤4：Deploy with new secrets——Deploy the application with the new secrets active and old secrets as fallback. 步骤5：Remove old secrets——After confirming the new secrets work, remove the old secrets from the manager.
验证与清理
预期结果：All secrets are rotated without downtime, and the rotation process is documented for future use.。验证方法：Verify the application works correctly after rotation; confirm old secrets are no longer valid.。清理操作：Keep old secrets until the new ones are confirmed working; revoke them only after verification.。estimatedMinutes 为 60 分钟。
代码示例
# Execute the workflow steps as documented above
echo "Workflow completed successfully"