If you want to use Kubernetes with SELinux and mount PersistentVolume, you have to make sure your mounted FS has labels.
You can do it with the mountOptions -o context="system_u:object_r:container_var_lib_t:s0" and if your driver doesn't support it, you can write an SELinux policy.
This post is build-up on the Merge ConfigMap and Secrets post. It is another use of initContainers , templating, and entrypoint to customize a container startup.
Watch the basic deployment & snapshot-based deployment videos on Youtube and check the .gitlab-ci-cd.yaml on Gitlab.
To use a Secret value within a ConfigMap you can use an initContainer to call a template engine.
For events monitoring you can use this ready-to-go elastic + kibana + k8s-event-exporter stack from: k8s-events-reporting