#community-help

Updating Bootstrap Key in a Cluster

TLDR Pradyuman enquired about rotating the bootstrap key in a cluster. Kishore Nallan explained the current limitations and advised to raise this issue on Github. Pradyuman submitted the issue.

Powered by Struct AI
Dec 04, 2021 (21 months ago)
Pradyuman
Photo of md5-d7f4aa44e3d4866e8b7a38eceb9af762
Pradyuman
09:30 AM
Is there a way to rotate the initial bootstrap key that was used? I don't see it in the list of keys returned from the API.
Kishore Nallan
Photo of md5-4e872368b2b2668460205b409e95c2ea
Kishore Nallan
09:31 AM
The bootstrap key is special and is a failsafe. You typically don't use it for anything but only use it to generate another master key that you can use and rotate. The only way to change the bootstrap key is to restart Typesense server with a different bootstrap key, since the key can be passed only by CLI argument (--api-key) or via configuration file or env variable.
Pradyuman
Photo of md5-d7f4aa44e3d4866e8b7a38eceb9af762
Pradyuman
09:46 AM
If we have a cluster, can we update this bootstrap key on a rolling basis? Or will changing it on one node lead to synchronization issues or potential cluster downtime?
Kishore Nallan
Photo of md5-4e872368b2b2668460205b409e95c2ea
Kishore Nallan
09:47 AM
Not possible currently to do this in a rolling fashion without pausing writes. Can you please create an issue on Github? We should support this.
09:48
Kishore Nallan
09:48 AM
Just to clarify, will require pausing writes to cluster.
Pradyuman
Photo of md5-d7f4aa44e3d4866e8b7a38eceb9af762
Pradyuman
11:00 PM
Sure!
11:15
Pradyuman
11:15 PM
Let me know if there's any additional context you'd like me to add to this.
Dec 05, 2021 (21 months ago)
Kishore Nallan
Photo of md5-4e872368b2b2668460205b409e95c2ea
Kishore Nallan
01:55 AM
Looks good, thanks.