When a validating webhook blocks the ConfigMap that would fix it
The kubectl patch came back as a webhook timeout, not a credentials error. That was the moment the incident stopped being about a rotated MongoDB password and started being about the admission layer.
blog.infraforge.agency11 min read