anchor.diff:  ----
   apiVersion: "v1"
   kind: "Secret"
  -metadata: 
  +metadata:
     name: "mysecret"
   namespace: "myns"
   data: <1>
  
positive.code: [[secrets-restrictions]]
  == Restrictions
  
  Secret volume sources are validated to ensure that the specified object
  reference points to a `*Secret*` object. Therefore, a secret needs to be created
  before the pods that depend on it.
  
  Secret API objects reside in a namespace. They can only be referenced by pods in
  that same namespace.
  
negative.code: Individual secrets are limited to 1MB in size. This is to discourage the
  creation of large secrets that would exhaust apiserver and kubelet memory.
  However, creation of a number of smaller secrets could also exhaust memory.
  
  [[secret-data-keys]]
  
  