13_secret_example.yml

---
apiVersion: v1
kind: Pod
metadata:
  name: secret-example
spec:
  volumes:
    - name: config
      configMap:
        name: my-config
    - name: secret
      secret:
        secretName: my-secret
  containers:
    - name: main
      image: sikalabs/nginx-public
      ports:
        - containerPort: 80
      env:
        - name: MY_DEFAULT_TOKEN
          value: default
        - name: MY_KEY
          valueFrom:
            secretKeyRef:
              name: my-secret
              key: password
        - name: MY_TOKEN
          valueFrom:
            secretKeyRef:
              name: my-secret
              key: token
        - name: MY_CONFIG
          valueFrom:
            configMapKeyRef:
              name: my-config
              key: config
      volumeMounts:
        - name: secret
          subPath: password
          mountPath: /usr/share/nginx/html/password.txt
        - name: secret
          subPath: tokenFromString
          mountPath: /usr/share/nginx/html/tokenFromString.txt

        - name: config
          subPath: config
          mountPath: /usr/share/nginx/html/config.txt
        - name: config
          subPath: hello.html
          mountPath: /usr/share/nginx/html/hello.html
        - name: config
          subPath: config.yaml
          mountPath: /usr/share/nginx/html/config.yaml.txt

        - name: config
          mountPath: /usr/share/nginx/html/configmap
        - name: secret
          mountPath: /usr/share/nginx/html/secret
      resources:
        requests:
          memory: 50Mi
          cpu: 50m
        limits:
          memory: 100Mi
          cpu: 100m