apiVersion: v1
kind: Pod
metadata:
  name: mypod-volumesecret
spec:
  containers:
    - name: volumesecret
      image: redis
      volumeMounts:
        - name: foo
          mountPath: "/etc/foo"
          readOnly: true
  volumes:
    - name: foo
      secret:
        secretName: mysecret-manifest
