secrets.py

def reconcile(self, event: Any):
    secret = self.model.get_secret(...)
    passwd = secret.get_content(refresh=True)
    reldata = self.foo_requirer.get_foobar()
    
    try:
        self.workload.reconfigure_and_restart(
            redata,
            passwd,
            ...
        )
        self.unit.status = ops.ActiveStatus()
    except NotSafeToRestartWorkloadNow:
        self.unit.status = ops.ActiveStatus("Degraded: will restart workload later")