Rotating Provider Credentials

1. Update the ProviderConfig secret in the target cluster.
2. Verify provider pods restart and reconnect:

kubectl rollout restart deployment -n crossplane-system

1. Check provider health:

kubectl get providers.pkg.crossplane.io

1. Trigger reconciliation of affected XRs:

kubectl annotate <xr-kind> <xr-name> crossplane.io/paused=false --overwrite