An Elastic ingest pipeline keeps 401ing (elastic-sidecar-kept-using-projected-old-api-key-volume)

The new key exists, yet one workload keeps failing because its projected secret volume belongs to a pod template that never rolled.