Calendar Favorite 1 Streamline Icon: https://streamlinehq.com  Mark Your Calendars: The next VSecM Contributor Sync will be on... Thursday, 2024-09-26 at 8:00am Pacific time.
Rating Star 1 Streamline Icon: https://streamlinehq.com  Star VMware Secrets Manager to show your support. Help us reach out to even more people with this amazing tech.

ADR-0005: Be Resilient by Default

{{ /* | Protect your secrets, protect your sensitive data. : Explore VMware Secrets Manager docs at https://vsecm.com/ </ <>/ keep your secrets… secret >/ <>/’ Copyright 2023-present VMware Secrets Manager contributors. >/’ SPDX-License-Identifier: BSD-2-Clause */ }}

  • Status: accepted
  • Date: 2024-05-11
  • Tags: quality, stability

Link Context and Problem Statement

When an VMware Secrets Manager component crashes or when an VMware Secrets Manager component is evicted, the workloads can still function with the existing secrets they have without having to rely on the existence of an active secrets store.

When an VMware Secrets Manager component restarts, it seamlessly recovers its state from an encrypted backup without requiring manual intervention.

Link Decision Drivers

  • Resilience is also related to being practically secure
  • A resilient system is easy to operate, maintain, and troubleshoot.
  • To have a highly-available system, we need to be resilient first.

Link Considered Options

  1. Be resilient by default.
  2. Think about resilience only when we have time.

Link Decision Outcome

Chosen option: “option 1”, because we cannot afford to have a system that is not resilient.

Link Positive Consequences

  • DevOps will sleep more.

Link Negative Consequences

  • Additional work upfront.
  • Additional complexity in the system.

 

 

Link ADRs

You can view the ADRs by browsing this following list:

edit this page ✏️