On-demand emergency management operations in a distributed computing system

One or more computer storage media storing computer-useable instructions that, when used by one or more computing devices, cause the one or more computing devices to perform operations comprising:

• generating a request to perform emergency management operations, wherein the emergency management operations comprise one of the following:
• certificate update operations or managed-secrets rollover operations;
• based on the request, determining to initiate the certificate update operations or the managed-secrets rollover operations, wherein, during the certificate update operations, the operations comprise:
• generating a certificate update secret package, wherein the certificate update secret package comprises a new secret state, wherein a client secret manager is configured to install the new secret state of the certificate update secret package on a client secret store of a virtual machine running the client secret manager, wherein the certificate update secret package is accessed from a corresponding host machine of the virtual machine;
• and
• triggering deployment of the certificate update secret package from a secret package store, wherein the certificate update secret package is deployed to a first plurality of host machines;
• and
• during the managed-secrets rollover operations, the operations comprise:
• generating a managed-secrets rollover secret package, wherein the managed-secrets rollover secret package comprises a notification-based new secret state, wherein the client secret manager is configured to, based on the managed-secrets rollover secret package having the notification-based new secret state, poll a distributed secrets management service (dSMS) to refresh the client secret store, wherein the managed-secrets rollover secret package is accessed from a corresponding host machine of the virtual machine;
• and
• triggering deployment of the managed-secrets rollover secret package from the secret package store, wherein the managed-secrets rollover secret package is deployed to a second plurality of host machines.

A method for on-demand emergency management in distributed computing systems, the method comprising:

• during certificate update operations:
• accessing a certificate update secret package, wherein a client secret manager is configured to install a new secret state of the certificate update secret package on a client secret store of a virtual machine running the client secret manager, wherein the certificate update secret package is accessed from a corresponding host machine of the virtual machine;
• processing the certificate update secret package using a pre-installation environment that prioritizes installation of new secrets, in the client secret store, over one or more boot operations;
• and
• installing the new secret state of the certificate update secret package based on a defined set of logic, policies, or tasks identified in the certificate update secret package;
• and
• during managed-secrets rollover operations:
• accessing a managed-secrets secret package;
• wherein the client secret manager is configured to, based on the managed-secrets rollover secret package having a notification-based new secret state, poll a distributed secrets management service (dSMS) to refresh the client secret store, wherein the managed-secrets rollover secret package is accessed from a corresponding host machine of the virtual machine;
• based on the managed-secrets rollover secret package having the notification-based new secret state, polling a distributed secrets management service (dSMS) to refresh a host secret store;
• and
• installing a certificate state in the client secret store.