skarbiec rotation run

Invocation#

skarbiec rotation run [--item <item-id>]

Purpose#

Start every due rotation now; the command a Stado schedule, cron or launchd calls.

Required inputs and options#

• No positional input. --item limits the run to that one item when it is due.

Output and state effects#

• For each policy whose interval has passed since the last accepted rotation or since it was declared, or that is marked due, starts credential rotate through the --local path and writes the outcome on the policy: last_attempt_at, last_status, last_error in Weles's own words, last_request_id and consecutive_failures; an accepted rotation restarts the interval and clears due_reason. Each attempt is journalled as rotation-started or rotation-failed. Prints ok, ran and failed.

Refusals#

• Exits 1 with <N> scheduled rotation(s) were not accepted: <report> when any due rotation was refused; the other due rotations still run. The replica refusal names rotation run.