kubernetes - test dynamic secrets

secret-test.yml

apiVersion: v1
kind: Secret
metadata:
  name: mysecret
type: Opaque
data:
  hello: d29ybGQ=
---
apiVersion: v1
kind: Pod
metadata:
  name: mypod
spec:
  containers:
    - name: bash
      image: busybox
      args:
        - "sleep"
        - "300"
      volumeMounts:
        - name: secretvolume
          mountPath: "/etc/secrets"
  volumes:
    - name: secretvolume
      secret:
        secretName: mysecret

test.sh

#!/bin/bash -x
kubectl apply -f secret-test.yml
echo "wait for pod to download/run"
sleep 5
kubectl exec mypod -- cat /etc/secrets/hello
kubectl patch secret mysecret -p '{"data":{"hello":"bW9t"}}'
echo "eventually consistent"
sleep 1
for i in {1..15}
do
  sleep 2
  kubectl exec mypod -- cat /etc/secrets/hello
done