Rotating keys

This documentation is for the CARTO Self-Hosted Legacy Version. Use only if you've installed this specific version. Explore our latest documentation for updated features.

Rotating keys in CARTO Self-Hosted is a simple process to ensure the security of your custom buckets, BigQuery OAuth connections, Google basemaps and custom LDS API Keys. Below are instructions for both the single VM deployment and orchestrated container deployment versions.

Single VM deployments (Docker Compose)

1. Navigate to your CARTO Self-Hosted installation directory.

2. Inside the customer.env file, find and update the keys related to custom buckets, BigQuery OAuth connections, Google basemaps and LDS API Keys.

3. Save the changes to the customer.env file.

4. Restart your self-hosted deployment using the following command:

   docker-compose down && docker-compose up -d

Orchestrated container deployment (Kubernetes)

If you've provided redacted secrets values:

1. Access the customizations.yaml file used to deploy your CARTO Self-Hosted platform.

2. Update the keys related to custom buckets, BigQuery OAuth connections, Google basemaps and LDS API Keys.

3. Save the changes to the customizations.yaml file.

4. Upgrade your Self-Hosted installation to apply the changes.

If you need to update secrets manually:

1. Identify the secrets associated with custom buckets, BigQuery OAuth connections, Google basemaps and LDS API Keys.

2. Use the kubectl command to update the specific secrets.

3. Upgrade your installation to apply the changes.

Remember to perform these steps with caution, ensuring minimal downtime for your CARTO Self-Hosted deployment.