title: Kubernetes Secret TLS Certificate P12 and Spring Boot Deployment doesn't work
body: <p>I'm currently stuck and don`t know how to proceed.</p>
  
  <p>This is my Spring Boot application.properties</p>
  
  <pre><code>...
  spring.datasource.driverClassName=org.postgresql.Driver
  spring.datasource.url=jdbc:postgresql://${POSTGRES_HOST}:5432/postgres
  spring.datasource.username=${POSTGRES_USER}
  spring.datasource.password=${POSTGRES_PASSWORD}
  spring.datasource.testWhileIdle=true
  spring.datasource.validationQuery=SELECT 1
  spring.jpa.show-sql=true
  spring.jpa.hibernate.ddl-auto=update
  spring.jpa.hibernate.naming-strategy=org.hibernate.cfg.ImprovedNamingStrategy
  spring.jpa.properties.hibernate.dialect=org.hibernate.dialect.PostgreSQLDialect
  
  #Setup SSL
  server.port: 8443
  server.ssl.key-store: ${TLS_CERTIFICATE}
  server.ssl.key-store-password: ${TLS_PASSWORD}
  server.ssl.keyStoreType: PKCS12
  server.ssl.keyAlias fundtr
  ...
  </code></pre>
  
  <p>My Deployment yaml for Spring Boot Application:</p>
  
  <pre><code>apiVersion: extensions/v1beta1
  kind: Deployment
  metadata:
    name: f-app
    namespace: default
  spec:
    replicas: 1
    template:
      metadata:
        name: f-app
        labels:
          app: f-app
      spec:
        containers:
        - name: f-app
          image: eu.gcr.io/..../...
          env:
            - name: POSTGRES_USER
              valueFrom:
                configMapKeyRef:
                  name: postgres-config
                  key: postgres_user
            - name: POSTGRES_PASSWORD
              valueFrom:
                configMapKeyRef:
                  name: postgres-config
                  key: postgres_password
            - name: POSTGRES_HOST
              valueFrom:
                configMapKeyRef:
                  name: hostname-config
                  key: postgres_host
            - name: TLS-CERTIFICATE
              valueFrom:
                secretKeyRef:
                  name: f-tls
                  key: Certificate.p12
            - name: TLS-PASSWORD
              valueFrom:
                secretKeyRef:
                  name: f-tls
                  key: password
  </code></pre>
  
  <p>This is how I create secret in Kubernetes:</p>
  
  <pre><code>kubectl create secret generic f-tls --from-file=Certificate.p12 --from-literal=password=changeit
  </code></pre>
  
  <p>When it's deployed I'm getting </p>
  
  <pre><code>State:         Waiting
    Reason:      CrashLoopBackOff
  Last State:    Terminated
    Reason:      ContainerCannotRun
    Message:     oci runtime error: container_linux.go:247: starting container process caused "process_linux.go:295: setting oom score for ready process caused \"write /proc/13895/oom_score_adj: invalid argument\""
  </code></pre>
  
  <p>When I remove the Secrets from the Deployment yaml it's working fine, but I could not understand what it the root cause of this issue. I'm using Google Cloud Platform Container Engine.</p>