When docker creds are passed in as [`CREDENTIAL_PROVIDER_SECRET_PATH`](https://github.com/buildpacks-community/kpack/blob/4e9236b54ec77232ced637653de09bd4f3176981/pkg/dockercreds/volume_secret_keychain.go#L13C1-L13C1), the values are only read [once at startup](https://github.com/buildpacks-community/kpack/blob/4e9236b54ec77232ced637653de09bd4f3176981/pkg/dockercreds/parse_secrets.go#L14). If these secrets ever change (i.e. as part of a rotation), the controller has to be restarted in order to use the new values.
When docker creds are passed in as
CREDENTIAL_PROVIDER_SECRET_PATH, the values are only read once at startup.If these secrets ever change (i.e. as part of a rotation), the controller has to be restarted in order to use the new values.