Writable secrets that can be consumed

service-docker-repository-query/deployment.yaml

@@ -15,6 +15,22 @@ spec:
     spec:
       imagePullSecrets:
         - name: ghcr-secret
+      initContainers:
+        - name: copy-secrets
+          image: busybox
+          command:
+            - sh
+            - -c
+            - |
+              for f in /secrets/*; do
+                cp "$f" /etc/secrets/
+                chmod 666 "/etc/secrets/$(basename $f)"
+              done
+          volumeMounts:
+            - name: service-docker-repository-query-secrets
+              mountPath: /secrets
+            - name: writable-secrets
+              mountPath: /etc/secrets
       containers:
         - name: service-docker-repository-query
           image: ghcr.io/gansejunge/app-notifications-service-docker-repository-query:13
@@ -29,10 +45,12 @@ spec:
             - name: BACKEND_API_URL
               value: "http://backend-api-internal.app-notifications.svc.cluster.local:8101/internal/receive-notifications"
           volumeMounts:
-            - name: service-docker-repository-query-secrets
+            - name: writable-secrets
               mountPath: /etc/secrets
               readOnly: true
       volumes:
         - name: service-docker-repository-query-secrets
           secret:
             secretName: service-docker-repository-query
+        - name: writable-secrets
+          emptyDir: {}