secretref.yaml

steps:
  - label: ":git::console::superhero: checkout private git repo as root"
    agents:
      queue: "{{.queue}}"
    plugins:
      - kubernetes:
          gitEnvFrom:
            - secretRef:
                name: integration-test-ssh-key
          podSpec:
            containers:
              - image: alpine:latest
                command:
                  - echo hello world

  - label: ":git::console::student: checkout private git repo as user"
    agents:
      queue: "{{.queue}}"
    plugins:
      - kubernetes:
          gitEnvFrom:
            - secretRef:
                name: integration-test-ssh-key
          podSpec:
            containers:
              - image: alpine:latest
                command:
                  - echo hello world
            securityContext:
              runAsNonRoot: true
              runAsUser: 1000
              runAsGroup: 1001