apiVersion: bitnami.com/v1alpha1 kind: SealedSecret metadata: name: sealed-test-secret namespace: default spec: encryptedData: MY_KEY: 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 --- apiVersion: apps/v1 kind: Deployment metadata: name: sealed-test-deployment labels: app: sealed-test spec: replicas: 2 selector: matchLabels: app: sealed-test template: metadata: labels: app: sealed-test spec: containers: - name: env-display image: radeklos/env:latest # Unmaintained image, DON'T USE IT IN PRODUCTION. Just for testing. ports: - containerPort: 80 envFrom: - secretRef: name: sealed-test-secret resources: requests: memory: "32Mi" cpu: 128m limits: memory: "64Mi" cpu: 256m --- apiVersion: v1 kind: Service metadata: name: sealed-test-service spec: type: ClusterIP selector: app: sealed-test ports: - protocol: TCP port: 8000 targetPort: 5000 --- apiVersion: networking.k8s.io/v1 kind: Ingress metadata: name: sealed-test-ingress annotations: nginx.ingress.kubernetes.io/rewrite-target: / spec: ingressClassName: nginx rules: - http: paths: - path: /sealed-test pathType: Prefix backend: service: name: sealed-test-service port: number: 8000