apiVersion: v1
kind: Pod
metadata:
  name: secret-check
  namespace: app-secrets
spec:
  restartPolicy: Never
  containers:
    - name: secret-check
      image: busybox:1.36
      command:
        - sh
        - -c
        - |
          echo DB_USERNAME=$DB_USERNAME
          if [ -n "$DB_PASSWORD" ]; then echo DB_PASSWORD_SET=yes; fi
          sleep 300
      env:
        - name: DB_USERNAME
          valueFrom:
            secretKeyRef:
              name: app-secret
              key: DB_USERNAME
        - name: DB_PASSWORD
          valueFrom:
            secretKeyRef:
              name: app-secret
              key: DB_PASSWORD