Getting Started with HashiCorp Nomad - Demo - Rotating the Gossip Encryption Key

The video tutorial explains the process of rotating a gossip encryption key in a Nomad cluster. It covers generating a new key, installing it, switching to the new key, and removing the old one. The tutorial also discusses the role of the configuration file and how key changes are broadcasted across the cluster. The process ensures that the cluster remains secure by using the latest encryption key.

What is the first step in rotating a gossip encryption key?

• Install the new key on the cluster

• Generate a new gossip key

• Update the configuration file

• Remove the old key

After generating a new gossip key, what is the next step?

• Remove the old key

• List the keys in the cluster

• Update the configuration file

• Install the new key on the cluster

How can you verify the keys currently in use in the cluster?

• By restarting the Nomad service

• By generating a new key

• By using the 'nomad operator gossip key ring list' command

• By checking the configuration file

What command is used to switch to a new gossip encryption key?

• nomad operator gossip key ring install

• nomad operator gossip key ring remove

• nomad operator gossip key ring use

• nomad operator gossip key ring list

What should be done after switching to the new key?

• Update the configuration file

• Remove the old key

• Restart the Nomad service

• Generate another new key

What does Nomad use to validate the encryption key when the service starts?

• The cluster nodes

• The configuration file

• The key ring

• The server logs

What happens if the old key is still present in the configuration file after a key rotation?

• Nomad will generate an error

• Nomad will ignore the old key

• Nomad will use the old key

• Nomad will stop the service