apiVersion: v1
kind: Pod
metadata:
  name: secret-env-pod
spec:
  containers:
    - name: test-container
      image: k8s.gcr.io/busybox
      command: [ "/bin/sh", "-c", "env" ]
      env:
        - name: MY_SECRET_DATA
          valueFrom:
            secretKeyRef:
              name: test-secret
              key: data-1
  restartPolicy: Never