security(alertmanager): add token rotation runbook (HOM-182) #323

Open
aaron wants to merge 1 commit from security/HOM-182-alertmanager-token-rotation-runbook into live
Owner

Adds a runbook for rotating the Alertmanager → Paperclip webhook bearer token.

  • Documents the GitOps-only rotation procedure
  • Includes validation curl commands and rollback steps
  • Notes current residual risks and future hardening opportunities

Security review: HOM-182
Parent: HOM-141

Adds a runbook for rotating the Alertmanager → Paperclip webhook bearer token. - Documents the GitOps-only rotation procedure - Includes validation curl commands and rollback steps - Notes current residual risks and future hardening opportunities Security review: [HOM-182](/HOM/issues/HOM-182) Parent: [HOM-141](/HOM/issues/HOM-141)
security(alertmanager): add token rotation runbook (HOM-182)
Some checks failed
0/0 projects applied successfully.
CI Review / pr-title (pull_request) Has been cancelled
CI Review / helm-validate (pull_request) Has been cancelled
Lint & Validate / terraform-validate (pull_request) Has been cancelled
Lint & Validate / yaml-lint (pull_request) Has been cancelled
Lint & Validate / shellcheck (pull_request) Has been cancelled
CI Review / ai-review (pull_request) Has been cancelled
3fbefacc9e
- Document bearer-token rotation procedure for Alertmanager -> Paperclip
- Include validation curl commands and rollback steps
- Note current residual risks and future hardening opportunities

Co-Authored-By: Paperclip <noreply@paperclip.ing>
Some checks failed
0/0 projects applied successfully.
CI Review / pr-title (pull_request) Has been cancelled
Required
Details
CI Review / helm-validate (pull_request) Has been cancelled
Required
Details
Lint & Validate / terraform-validate (pull_request) Has been cancelled
Required
Details
Lint & Validate / yaml-lint (pull_request) Has been cancelled
Required
Details
Lint & Validate / shellcheck (pull_request) Has been cancelled
Required
Details
CI Review / ai-review (pull_request) Has been cancelled
Some required checks were not successful.
This branch is out-of-date with the base branch
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin security/HOM-182-alertmanager-token-rotation-runbook:security/HOM-182-alertmanager-token-rotation-runbook
git switch security/HOM-182-alertmanager-token-rotation-runbook
Sign in to join this conversation.
No reviewers
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
aaron/infra-core!323
No description provided.