A Deployment injects Secret keys with envFrom.secretRef. After you update the Secret data, application processes still show the old values. What should you expect?
Select an answer to reveal the explanation.
Short Explanation
Env vars are stamped at birth—updating the Secret later doesn't rewrite a running process's environment. Roll the Deployment or restart Pods to pick up new values. Volume mounts can refresh files; envFrom is a different story.
Full Explanation
Secret data injected as environment variables is consumed when the container starts. Updating the Secret object does not reliably mutate the environment of already-running processes, so a Pod restart or Deployment rollout is typically required. Projected or mounted Secret volumes may update files on disk differently, but that behavior should not be assumed for env / envFrom injection.