Agent secrets rotation checklist
Use this checklist to keep agent credentials from becoming permanent fixtures.
Print this next to your on-call notes.
Checklist
1. Every agent has its own credential. 2. Scope matches the job. 3. Rotation date is set. 4. Revocation runs when the agent stops. 5. Logs join agent id to secret id. 6. No secrets in prompts or tickets.