The key and the secret are only created once on the initial setup, yes. But k8s should retry mounting the secret to the other apps deoloyment until it exists, doesn't it? Else, you probably have to orchestrate the other apps deployment to be created not earlier than when the setup job succeeded? Dit I get your question right?