---apiVersion:v1kind:Secretmetadata:name:simple-secret-secret-key-ref-secrettype:OpaquestringData:config.yaml:|-password: apasswordusername: ausername---apiVersion:v1kind:Podmetadata:name:simple-secret-secret-key-ref-podspec:containers:-command:-sleep-"3600"image:busyboxname:simple-secret-secret-key-ref-containerenv:-name:simple-secret-secret-key-ref-envvalueFrom:secretKeyRef:name:simple-secret-secret-key-ref-secretkey:config.yaml# this volume mount is not required, but demonstrates that the secret can# be mounted both as an env var and as a filevolumeMounts:-name:simple-secret-secret-key-ref-volumemountPath:"/etc/simple-secret"volumes:-name:simple-secret-secret-key-ref-volumesecret:secretName:simple-secret-secret-key-ref-secret