Zero-downtime Redis password rotation

TL;DR Link to heading A Redis ACL user can hold two passwords at once, so a rotation needs no moment where anyone is locked out. Add the new password to every Redis and Sentinel process, publish it, restart the clients, then restart the Redis pods one by one. The restarts remove the old password; you can’t do it at runtime on the Bitnami chart, because the health probes still log in with it. Before restarting, move sentinel-pass to the new password as well, or the Sentinels lock each other out.