--- apiVersion: v1 data: test: dGVzdA== kind: Secret metadata: name: test-secret type: Opaque --- apiVersion: v1 kind: Pod metadata: generateName: issue-repro- spec: securityContext: runAsUser: 1000 fsGroup: 1000 containers: - image: busybox name: busybox imagePullPolicy: IfNotPresent args: - "ls" - "-alR" - "/tmp/dummy-secret" volumeMounts: - mountPath: /tmp/dummy-secret name: test-secret volumes: - name: test-secret secret: defaultMode: 256 secretName: test-secret