Modifying the Template

The tibemsd-template.yaml template has to be modified to mount the secret as a volume. This involves adding one entry to the volumes section and another to the volumeMounts section. 

kind: Deployment
  …
  spec:
    …
    template:
      …
      spec:
        containers:
        - name: tibemsd-container
          …
          volumeMounts:
          - mountPath: /shared
            name: tibemsd-volume
          - mountPath: /etc/secret
            name: tibemsd-secret-volume
            readOnly: true
        …
        volumes:
        - name: tibemsd-volume
          persistentVolumeClaim:
            claimName: ${{EMS_PVC}}
        - name: tibemsd-secret-volume
          secret:
            secretName: tibemsd-secret
Note: You should eventually convert the secretName entry into a parameter.