DevOpsInterviewPrep logo
← Infrastructure as Code & Configuration / 35
mediumNewRazorpayJPMorgan ChaseSAP

Terraform rotates the production database password tonight. Walk me through how every application survives the change.

Rotation is an expand-contract migration for credentials: stage the new secret, prove every reader picked it up, revoke the old one, and treat the revocation as the test. The outage risk lives in clients and connection pools, not in Terraform.

Updated Sep 2026 · Grounded in researched DevOps, SRE and platform engineering interview loops, written to a senior-engineer editorial bar, and never padded to hit a word count.

Rotation is an expand-contract migration for credentials: stage the new secret, prove every reader picked it up, revoke the old one, and treat the revocation as the test. The outage risk lives in clients and connection pools, not in Terraform.

20 answers per topic instead of 10, and your progress kept · no cardor unlock all 390 remaining answers · ₹2,000 / $25
UP NEXT ON YOUR JOURNEY
Next in this trackDesign the publishing flow for an internal Terraform module registry: what gates a release, and how do modules retire?Next in this trackA team proposes replacing Terraform with Crossplane so infrastructure is reconciled like a Deployment. Argue it.Next in this trackA Terraform module passes every mocked test, but its first real apply fails. What did the tests prove, and what would you add?
DISCUSSION · 0

Nothing here yet. Say how you would answer it.