Rotate Credentials
SkillDatabases & dataRotates the database and message-broker credentials.
Available today. Use it from your connected AI after setup.
No other account needed.
Connect ahel once, and every AI you use reads what you have installed.
Then ask your AI: use the Rotate Credentials skill
What this skill tells your AI
The instructions your AI receives, as published by stbenjam/skillsaw in tests/fixtures/large-skill-library/skills/rotate-credentials/SKILL.md and read by ahel’s review.
Credentials for the primary Postgres cluster and the broker rotate every 90 days. Rotation is two-phase: issue the new secret, then retire the old one once every consumer has reconnected.
Phase one — issue
Run vaultctl issue db/primary and record the lease id. The full
parameter list lives in the vault reference.
Phase two — retire
Wait for the connection-drain metric to reach zero, then revoke the old lease. The drain dashboard shows per-consumer counts.
A consumer that never drains is handled in the stuck-consumer guide.
Signals
- GitHub stars
- 66
- Forks
- 15
- Last commit
- Sep 2026
Advanced
- Catalog kind
- skill
- Gateway key
rotate-credentials- Source
- github.com/stbenjam/skillsaw