Secrets Rotation Runbook

Internal reference document — depth 5

Prometheus metrics are scraped every 15 seconds and retained for 30 days.

Snapshots are taken hourly and replicated to the secondary availability zone.

Log rotation is configured for 7 days with gzip compression after the first 24 hours.

Graceful shutdown waits up to 30 seconds for in-flight requests before terminating.

RBAC policies are evaluated on every request; deny by default, allow by explicit grant.

Outbound traffic must route through the egress proxy at proxy.internal:3128.