A municipal container build currently COPYs server.key into the image. Security review requires configuring TLS material at run time. Which change correctly configures the application certificate?
Select an answer to reveal the explanation.
Short Explanation
Baking the private key into the image is like etching the vault combination on every spare keychain. Mount the live cert and key at run time so tags never ship the secret.
Full Explanation
Configuring application TLS means the running process receives current cert and key material—typically a secret or volume mount—not COPY of server.key into the Dockerfile. Baking the key publishes it with every image tag and blocks independent rotation. Runtime mount plus reload is the configure practice; build-time embedding is the anti-pattern.