Hello. I'm trying to understand the impact of losi...
# ory-selfhosting
c
Hello. I'm trying to understand the impact of losing a set of kratos or hydra secrets. For example the kratos cookie secrets or hydra system secrets. I'm trying to understand if my entire cluster goes belly up what the impact will be. Can I create new secrets and keep running the same instances of hydra/kratos without issue or do I lose access to certain things like hashed passwords or JWKS etc?
m
hey @curved-ram-6189 I think if your entire cluster goes down and you lose secrets entirely (no rotation possible), the main permanent losses would be JWKs and active sessions/tokens. Passwords remain inta ct. After regenerating JWKs, new tokens can be issued normally.
c
Thanks @magnificent-energy-493. I was just testing now, and if the hydra system secrets are "forgotten" (or regenerated) it seems like hydra can't serve the openid-configuration (and I'm assuming more than a few other things). I'm guessing that without the old secret you can't do key rotation either?