Update ECK documentation for rotating credentials.

[naemono]

Question

• Do we want to also document how to rotate the Kibana encryption keys?

Related: elastic/cloud-on-k8s#8839

[naemono]

I don't love the wording here. Suggestions welcome.

[shainaraskas]

Suggest not referring to the previous docs when making corrections - if people think they saw something here previously, they can look in the git history. instead, we can tell them what to avoid and why. something like:

Suggested change

	Previous documentation suggested deleting all secrets with the label `eck.k8s.elastic.co/credentials=true`, which included the Kibana secret that contained encryption keys. Deletion of the Kibana config secret is not recommended.
	When deleting secrets so they can be regenerated, make sure to exclude {{kib}} secrets by specifying `type!=kibana`. {{kib}} secrets contain encryption keys, which should not be deleted.

[Copilot]

Pull Request Overview

Updates ECK documentation to improve the credential rotation process by preventing accidental deletion of Kibana encryption keys. The change refines the kubectl command to exclude Kibana secrets and adds a warning note about previous documentation.

• Modified kubectl command to exclude Kibana secrets when rotating credentials
• Added explanatory note about why Kibana config secrets should not be deleted

---

_{Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.}

[github-actions]

🔍 Preview links for changed docs

• deploy-manage/users-roles/cluster-or-deployment-auth/managed-credentials-eck.md

[shainaraskas]

approved with a suggestion

[shainaraskas]

Suggest not referring to the previous docs when making corrections - if people think they saw something here previously, they can look in the git history. instead, we can tell them what to avoid and why. something like:

Suggested change

	Previous documentation suggested deleting all secrets with the label `eck.k8s.elastic.co/credentials=true`, which included the Kibana secret that contained encryption keys. Deletion of the Kibana config secret is not recommended.
	When deleting secrets so they can be regenerated, make sure to exclude {{kib}} secrets by specifying `type!=kibana`. {{kib}} secrets contain encryption keys, which should not be deleted.