An init container must read database credentials that the main app…

Question

An init container must read database credentials that the main app also uses. What is an appropriate approach?

Accepted Answer

Mount the same Secret (as volume or env) into the init and app containers that need it — Secrets are shared keys on the building keyring: hand a copy to the setup crew (init) and to the staff (app) who both need the door opened—don’t paint the password on the hallway ConfigMap.

Answer

Bake the credentials into the init image only and omit them from the app container

Answer

Store passwords in a publicly readable ConfigMap labeled “secret”

Answer

Put credentials only on the node hostPath and hope both containers find them

An init container must read database credentials that the main app also uses. What is an appropriate approach?

Short Explanation

Full Explanation