curl --request POST \
--url https://api.devhelm.io/api/v1/vaults/rotate \
--header 'Authorization: Bearer <token>'{
"data": {
"previousDekVersion": 123,
"newDekVersion": 123,
"secretsReEncrypted": 123,
"channelsReEncrypted": 123,
"rotatedAt": "2023-11-07T05:31:56Z"
}
}Generates a new Data Encryption Key, re-encrypts all secrets and alert-channel configs, and bumps the vault version. Admin-only. Pipeline DEK caches expire within ~10 minutes.
curl --request POST \
--url https://api.devhelm.io/api/v1/vaults/rotate \
--header 'Authorization: Bearer <token>'{
"data": {
"previousDekVersion": 123,
"newDekVersion": 123,
"secretsReEncrypted": 123,
"channelsReEncrypted": 123,
"rotatedAt": "2023-11-07T05:31:56Z"
}
}