How deeply does Google Anthos in Action cover key rotation?

Defines replacement and transition, then connects the concept to CA-issued workload certificates without detailing rotation procedures.

Key rotation

As explained in Google Anthos in Action

Key rotation is the periodic replacement of cryptographic keys and transition to their replacements.

Key rotation periodically replaces cryptographic keys and transitions systems to their replacements. In an Istio service mesh, this concern sits within certificate management: the Istio certificate authority provisions workload identities and signs certificates for microservices. section 4.3.3

Istio’s certificate-authority configurations determine the trust material involved in managed identities:

Use a self-signed root certificate and key by default to sign microservice certificates. section 4.3.3
Supply an administrator-managed certificate and key, either with an existing root certificate or a delegated CA signing certificate and key. section 4.3.3
Treat the CA as a trusted third party that binds identities to public keys through digital certificates. section 4.3.3

How Google Anthos in Action covers it

liveBook manning.com

Read Google Anthos in Action on liveBook Get the book at manning.com

Also explained in

liveBook manning.com

Software Security for DevelopersKey rotation is the replacement of cryptographic keys with new keys according to a planned security lifecycle.

Compare how 2 books explain key rotation →

Related concepts

defense in depthpart of · Defense in depth is a security strategy that combines multiple protective controls so that the failure or compromise of one does not eliminate all protection.
counterconfigures · A counter is a stateful numeric value that tracks a quantity by changing through operations such as incrementing, decrementing, resetting, or assignment.
key managementpart of · Key management is the lifecycle administration of cryptographic keys, including their generation, storage, protection, distribution, use, rotation, revocation, and retirement.
RSAaddressed by · RSA is a public-key cryptosystem based on the computational difficulty of factoring large composite integers and supporting encryption and digital signatures.
metrickind of · A metric is a quantitative measure used to characterize or assess a property, condition, behavior, performance, or outcome.

This explainer was generated by Manning's knowledge graph from the text of Google Anthos in Action. The section links point to the parts of the book it draws on.