Rotating keys

Rotating keys for custom buckets, OAuth connections, basemaps, and API keys

Rotating keys in CARTO Self-Hosted is a simple process to ensure the security of your custom buckets, BigQuery OAuth connections, Google basemaps and custom LDS API Keys.

Kots

Kots

1. Access the Admin Console and check the config used to deploy your CARTO Self-Hosted platform.

2. Update the keys related to custom buckets, BigQuery OAuth connections, Google basemaps and LDS API Keys.

3. Update your Self-Hosted installation to apply the changes.

Helm

Remember to perform these steps with caution, ensuring minimal downtime for your CARTO Self-Hosted deployment.

Post-rotation verification

After rotating keys, confirm the deployment is still healthy:

• All pods are in Running or Completed state

• The CARTO application is reachable and you can log in

• Object storage (blob buckets) is accessible (thumbnails load, imports work)

• Data warehouse connections are healthy (especially BigQuery OAuth connections)

• Google Basemaps render correctly (if enabled)