apiVersion: v1
kind: Pod 
metadata:
  name: secret-pod
spec:
  containers:
    - name: mypod
      image: redis
      volumeMounts:
        - name: foo
          mountPath: /etc/foo
          readOnly: true
  
  volumes:
    - name: foo
      secret:
        secretName: secret-basic-auth
        items:
          - key: username
            path: custom/username
        defaultMode: 444

