One per service. Not just because it’s easy, but because it allows you to minimise blast radius. If you’re running one DB per container and one container gets compromised, only that one DB is compromised. With one centralised DB for all containers, a breach of one container means access to the data of all containers that use this database without the need for any lateral movement.