code: func parsePVSecret(namespace, secretName string, kubeClient clientset.Interface) (*storageosAPIConfig, error) {
  	secret, err := util.GetSecretForPV(namespace, secretName, storageosPluginName, kubeClient)
  	if err != nil {
  		klog.Errorf("failed to get secret from [%q/%q]", namespace, secretName)
  		return nil, fmt.Errorf("failed to get secret from [%q/%q]", namespace, secretName)
  	}
  	return parseAPIConfig(secret)
  }
docs: // Important: Only to be called with data from a PV to avoid secrets being
  // loaded from a user-suppler namespace.