apiVersion: bitnami.com/v1alpha1
kind: SealedSecret
metadata:
  name: sealed-test-secret
  namespace: default
spec:
  encryptedData:
    MY_KEY: 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
    MY_KEY2: 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
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: sealed-test-deployment
  labels:
    app: sealed-test
spec:
  replicas: 2
  selector:
    matchLabels:
      app: sealed-test
  template:
    metadata:
      labels:
        app: sealed-test
    spec:
      containers:
        - name: env-display
          image: radeklos/env:latest # Unmaintained image, DON'T USE IT IN PRODUCTION. Just for testing.
          ports:
            - containerPort: 80
          envFrom:
            - secretRef:
                name: sealed-test-secret
          resources:
            requests:
              memory: "32Mi"
              cpu: 128m
            limits:
              memory: "64Mi"
              cpu: 256m
---
apiVersion: v1
kind: Service
metadata:
  name: sealed-test-service
spec:
  type: ClusterIP
  selector:
    app: sealed-test
  ports:
    - protocol: TCP
      port: 8000
      targetPort: 5000
---
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: sealed-test-ingress
  annotations:
    nginx.ingress.kubernetes.io/rewrite-target: /
spec:
  ingressClassName: nginx
  rules:
    - http:
        paths:
          - path: /sealed-test
            pathType: Prefix
            backend:
              service:
                name: sealed-test-service
                port:
                  number: 8000