The city’s parking-citation database password was written into Vault as a new version, but the database has not been cut over yet. Apps that always fetch the current secret must keep using the old password until cutover. Which rotation-state pairing is correct?
Select an answer to reveal the explanation.
Short Explanation
Pending is the sealed envelope in the drawer; current is the password the door actually accepts. Stage the new bytes as pending, then promote to current only after the database is ready.
Full Explanation
Vault rotation states distinguish staged credentials from live ones. Mark a version pending when new bytes are stored but the target system is not yet cut over; mark a version current when the target already expects those bytes. Applications that always retrieve current will not see pending until it is promoted.