using secret instead of configmap