عرض عملي: تدوير كلمة مرور قاعدة البيانات دون توقف

خطوة بخطوة

1. Show the current setup: the password is stored in the secrets manager and read by orders via workload identity.
2. Create a second database user (or a second password) so two credentials are valid at once.
3. Update the secret; let orders pick up the new value and rebuild its connection pool.
4. Planned mistake: change the database password first, before the app has the new one; connections fail. Fix: add the new credential, switch the app, then revoke the old one.
5. Confirm no failed requests in the dashboard and run a scan showing no secret in the image, manifests, or Git.

اختبر فهمك