Based on the features of the Providers in a Managed Secret, we can tell whether that rekeying can be performed with or without downtime.
That is, all ALCs need to support the 3-phase workflow of BeforeRekeying, CommitNewSecrets and AfterRekeying . All RKOs need to support the GetSecretToUseDuringRekeying method.
If all of the above is true, we can (theoretically) perform a zero-downtime rotation, and we should distinguish that in some way on the UI.
Based on the features of the Providers in a Managed Secret, we can tell whether that rekeying can be performed with or without downtime.
That is, all ALCs need to support the 3-phase workflow of
BeforeRekeying,CommitNewSecretsandAfterRekeying. All RKOs need to support theGetSecretToUseDuringRekeyingmethod.If all of the above is true, we can (theoretically) perform a zero-downtime rotation, and we should distinguish that in some way on the UI.