Writable secrets that can be consumed

backend-api-internal/deployment.yaml

@@ -15,6 +15,22 @@ spec:
     spec:
       imagePullSecrets:
         - name: ghcr-secret
+      initContainers:
+        - name: copy-secrets
+          image: busybox
+          command:
+            - sh
+            - -c
+            - |
+              for f in /secrets/*; do
+                cp "$f" /etc/secrets/
+                chmod 666 "/etc/secrets/$(basename $f)"
+              done
+          volumeMounts:
+            - name: backend-api-internal-secrets
+              mountPath: /secrets
+            - name: writable-secrets
+              mountPath: /etc/secrets
       containers:
         - name: backend-api-internal
           image: ghcr.io/gansejunge/app-notifications-backend-api-internal:11
@@ -28,10 +44,13 @@ spec:
             - name: LOG_LEVEL
               value: "INFO"
           volumeMounts:
-            - name: backend-api-internal-secrets
+            - name: writable-secrets
               mountPath: /etc/secrets
               readOnly: true
       volumes:
         - name: backend-api-internal-secrets
           secret:
             secretName: backend-api-internal
+        - name: writable-secrets
+          emptyDir: {}
+