Rotate the signing key

Fixes: https://github.com/mattmoor/octo-sts/issues/7 Signed-off-by: Matt Moore <[email protected]>
octo-sts · Jan 21, 2024 · a739d58 · a739d58
1 parent 9b0c381
commit a739d58
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/iac/main.tf b/iac/main.tf
@@ -68,7 +68,7 @@ locals {
   #     --key app-signing-key \
   #     --algorithm rsa-sign-pkcs1-2048-sha256 \
   #     --target-key-file key.data
-  kms_key = "${google_kms_crypto_key.app-key.id}/cryptoKeyVersions/3"
+  kms_key = "${google_kms_crypto_key.app-key.id}/cryptoKeyVersions/1"
 }
 
 // Create a dedicated GSA for the IAM datastore service.