kind: Secret
apiVersion: v1
metadata:
  name: secret-env-password
stringData:
  ninja: SECRET_PASSWORD
---
apiVersion: tekton.dev/v1beta1
kind: TaskRun
metadata:
  name: secret-env
spec:
  taskSpec:
    steps:
    - name: secret
      image: public.ecr.aws/ubuntu/ubuntu:latest
      script: |
        #!/usr/bin/env bash
        [[ $SECRET_PASSWORD == SECRET_PASSWORD ]]
      env:
      - name: SECRET_PASSWORD
        valueFrom:
          secretKeyRef:
            name: secret-env-password
            key: ninja
