Make rotationIntervalSeconds nullable

backend/src/db/migrations/20251015042917_pam-account-rotation.ts

@@ -10,7 +10,7 @@ export async function up(knex: Knex): Promise<void> {
   ) {
     await knex.schema.alterTable(TableName.PamAccount, (t) => {
       t.boolean("rotationEnabled").notNullable().defaultTo(false);
-      t.integer("rotationIntervalSeconds").notNullable();
+      t.integer("rotationIntervalSeconds").nullable();
       t.timestamp("lastRotatedAt").nullable();
     });
   }

backend/src/db/schemas/pam-accounts.ts

@@ -20,7 +20,7 @@ export const PamAccountsSchema = z.object({
   createdAt: z.date(),
   updatedAt: z.date(),
   rotationEnabled: z.boolean().default(false),
-  rotationIntervalSeconds: z.number().default(2592000),
+  rotationIntervalSeconds: z.number().nullable().optional(),
   lastRotatedAt: z.date().nullable().optional()
 });
 

backend/src/ee/routes/v1/pam-account-routers/pam-account-endpoints.ts

@@ -23,7 +23,7 @@ export const registerPamResourceEndpoints = <C extends TPamAccount>({
     name: C["name"];
     description?: C["description"];
     rotationEnabled: C["rotationEnabled"];
-    rotationIntervalSeconds: C["rotationIntervalSeconds"];
+    rotationIntervalSeconds?: C["rotationIntervalSeconds"];
   }>;
   updateAccountSchema: z.ZodType<{
     credentials?: C["credentials"];

backend/src/ee/services/audit-log/audit-log-types.ts

@@ -3798,7 +3798,7 @@ interface PamAccountCreateEvent {
     name: string;
     description?: string | null;
     rotationEnabled: boolean;
-    rotationIntervalSeconds: number;
+    rotationIntervalSeconds?: number | null;
   };
 }
 
@@ -3811,7 +3811,7 @@ interface PamAccountUpdateEvent {
     name?: string;
     description?: string | null;
     rotationEnabled?: boolean;
-    rotationIntervalSeconds?: number;
+    rotationIntervalSeconds?: number | null;
   };
 }
 

backend/src/ee/services/pam-account/pam-account-dal.ts

@@ -49,6 +49,7 @@ export const pamAccountDALFactory = (db: TDbClient) => {
     const accounts = await dbClient(TableName.PamAccount)
       .innerJoin(TableName.PamResource, `${TableName.PamAccount}.resourceId`, `${TableName.PamResource}.id`)
       .whereNotNull(`${TableName.PamResource}.encryptedRotationAccountCredentials`)
+      .whereNotNull(`${TableName.PamAccount}.rotationIntervalSeconds`)
       .whereRaw(
         `COALESCE("${TableName.PamAccount}"."lastRotatedAt", "${TableName.PamAccount}"."createdAt") + "${TableName.PamAccount}"."rotationIntervalSeconds" * interval '1 second' < NOW()`
       )

backend/src/ee/services/pam-resource/pam-resource-schemas.ts

@@ -42,12 +42,12 @@ export const BaseCreatePamAccountSchema = z.object({
   name: slugSchema({ field: "name" }),
   description: z.string().max(512).nullable().optional(),
   rotationEnabled: z.boolean(),
-  rotationIntervalSeconds: z.number().min(3600)
+  rotationIntervalSeconds: z.number().min(3600).nullable().optional()
 });
 
 export const BaseUpdatePamAccountSchema = z.object({
   name: slugSchema({ field: "name" }).optional(),
   description: z.string().max(512).nullable().optional(),
   rotationEnabled: z.boolean().optional(),
-  rotationIntervalSeconds: z.number().min(3600).optional()
+  rotationIntervalSeconds: z.number().min(3600).nullable().optional()
 });