Kubernetes Simulator
advanced · ~12 min
Rotate the password
orders is healthy and serving. Security is about to rotate the database password.
Two facts decide this one. A pod reads its environment once, when its container starts — changing a Secret does not reach a running pod. And the Service only sends traffic to pods whose readiness check passes.
Objectives
- Put the new password in the orders-db Secret
- Every orders pod ready on the new password
- Bonus: Replace the pods with kubectl rollout restart
Best on a computer with a keyboard. It works on a phone, with shortcuts under the terminal.