argoproj/argo-workflows#711 not-super-onerous workaround

test.yaml

apiVersion: argoproj.io/v1alpha1
kind: Workflow
metadata:
  name: test
spec:
  entrypoint: main
  templates:
  - name: main
    inputs:
      artifacts:
      - name: script
        path: /bin/my-script
        mode: 755
        raw:
          data: |
            #!/bin/sh
            printenv
    container:
      image: busybox
      command: [my-script]
      env:
      - name: PASSWORD
        valueFrom:
          secretKeyRef:
            name: my-secret
            key: password