spec      : {
    ~ template: {
        ~ spec    : {
            - containers: "[secret]" <----- HERE
            + containers: [
            +     [0]: {
                    + command        : [
                    +     [0]: "xxx"
                    +     [1]: "xxx"
                    +     [2]: "xxx"
                    +     [3]: "xxx"
                    +     [4]: "xxx"
                      ]
                    + env            : [
                    +     [0]: {
                            + name : "ENVIRONMENT"
                            + value: "stage"
                          }
                      ]
                    + image          : "<http://0000000000.dkr.ecr.us-west-1.amazonaws.com/test:latest|0000000000.dkr.ecr.us-west-1.amazonaws.com/test:latest>"
                    + imagePullPolicy: "Always"
                    + name           : "test"
                    + ports          : [
                    +     [0]: {
                            + containerPort: 8000
                          }
                      ]
                    + resources      : {
                        + limits  : {
                            + cpu   : "4"
                            + memory: "8G"
                          }
                        + requests: {
                            + cpu   : "2"
                            + memory: "4G"
                          }
                      }
                    + volumeMounts   : [
                    +     [0]: {
                            + mountPath: "/config"
                            + name     : "config"
                            + readOnly : true
                          }
                      ]
                  }
              ]
            - volumes   : "[secret]" <----- HERE
            + volumes   : [
            +     [0]: {
                    + name  : "config"
                    + secret: {
                        + secretName: "config"
                      }
                  }
              ]
          }
      }
  }

getSecret

requireSecret

pulumi.secret(value)

core.v1.Secret

pulumi.Output