REST API, mission 7 of 7

Rotate the password

advanced, about 12 minutes, in the Kubernetes Simulator

Start mission

Opens once you pass Launch-day traffic.

The briefing

orders is healthy and serving. Security is about to rotate the database password.

Two facts decide this one. A pod reads its environment once, when its container starts — changing a Secret does not reach a running pod. And the Service only sends traffic to pods whose readiness check passes.

What you'll do

  • Put the new password in the orders-db Secret
  • Every orders pod ready on the new password
  • Bonus star: Replace the pods with kubectl rollout restart

The mission checks the cluster, not your keystrokes: any fix that works, passes.

More REST API missions

  1. 1. Config, not code
  2. 2. Read at start
  3. 3. CrashLoopBackOff
  4. 4. Ready when it's ready
  5. 5. Out of memory
  6. 6. Launch-day traffic
  7. 7. Rotate the password
Every Kubernetes Simulator mission

AboutGuidesCompare

PrivacyCookiesTerms

Hackademy is a trading name of Mather Software Ltd, registered in England and Wales, company number 17443861. ICO registration ZC256628.

Contact: support@mathersoftware.com© 2026 Mather Software Ltd