anchor.diff:  
   You can now insert this secret in the Kubernetes cluster with the following command:
   
  -    kubectl apply -f ./templates/secret.yaml
  -
  -=== Consume secrets
  -
  -Here we will demonstrate two ways to consume secrets from within pods.
  -
  -==== Using volumes
  +  kubectl apply -f ./templates/secret.yaml
  +
  +The list of created secrets can be seen as:
  +
  +  $ kubectl get secrets
  +  NAME                  TYPE                                  DATA      AGE
  +  default-token-4cqsx   kubernetes.io/service-account-token   3         8h
  +  mysecret              Opaque                                2         6s
  +
  +The values of the secret are displayed as `Opaque`.
  +
  +Get more details about the secret:
  +
  +  $ kubectl describe secrets/mysecret
  +  Name:         mysecret
  +  Namespace:    default
  +  Labels:       <none>
  +  Annotations:  <none>
  +
  +  Type:  Opaque
  +
  +  Data
  +  ====
  +  password:  8 bytes
  +  username:  5 bytes
  +
  +Once again, the values of the secret are not shown.
  +
  +==== Consume as volumes
   
   Deploy the pod:
   
       kubectl apply -f ./templates/pod-secret-volume.yaml
  +
  +The pod configuration file looks like:
  +
  +    apiVersion: v1
  +    kind: Pod
  +    metadata:
  +      name: pod-secret-volume
  +    spec:
  +      containers:
  +      - name: pod-secret-volume
  +        image: redis
  +        volumeMounts:
  +        - name: foo
  +          mountPath: "/etc/foo"
  +          readOnly: true
  +      volumes:
  +      - name: foo
  +        secret:
  +          secretName: mysecret
   
   Open a shell to the pod to see the secrets:
   
  
positive.code: 
  At the end of this section, you'll have created a ConfigMap `redis-config`.
  
  === Using ConfigMap in a Pod volume
  
  A ConfigMap must be created before referencing it in a Pod specification (unless you mark the ConfigMap as "`optional`"). If you reference a ConfigMap that doesn’t exist would , the Pod won’t start.
  
  
negative.code: 
  The above commands should result in the plain text values, the decoding is done for you.
  
  Delete the pod:
  
      kubectl delete -f ./templates/pod-secret-volume.yaml
  
  === Consume as environment variables
  
  Deploy the pod:
  
      kubectl apply -f ./templates/pod-secret-env.yaml
  
  The pod configuration file looks like:
  
      apiVersion: v1
      kind: Pod
      metadata:
        name: pod-secret-env
      spec:
        containers:
        - name: pod-secret-env
          image: redis
          env:
            - name: SECRET_USERNAME
              valueFrom:
                secretKeyRef:
                  name: mysecret
                  key: username
            - name: SECRET_PASSWORD
              valueFrom:
                secretKeyRef:
                  name: mysecret
                  key: password
        restartPolicy: Never
  
  Open a shell to the pod to see the secrets:
  
      kubectl exec -it pod-secret-env /bin/bash
      echo $SECRET_USERNAME
      echo $SECRET_PASSWORD
  
  