<p>When I run my application from IntelliJ, I get a <code>warning / error</code> though application builds fine and runs all tests through, is this something that I should ignore, or can this be handled fixed?</p>

<p>Kubernetes secret is used to create a random password, therefor I have a placeholder for that particular variable.</p>

<pre><code>2019-02-26 19:45:29.600  INFO 38918 --- [           main] j.LocalContainerEntityManagerFactoryBean : Initialized JPA EntityManagerFactory for persistence unit 'default'
2019-02-26 19:45:29.684  WARN 38918 --- [           main] ConfigServletWebServerApplicationContext : Exception encountered during context initialization - cancelling refresh attempt: org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'actuatorSecurity': Injection of autowired dependencies failed; nested exception is java.lang.IllegalArgumentException: Could not resolve placeholder 'ACTUATOR_PASSWORD' in value "${ACTUATOR_PASSWORD}"
2019-02-26 19:45:29.685  INFO 38918 --- [           main] j.LocalContainerEntityManagerFactoryBean : Closing JPA EntityManagerFactory for persistence unit 'default'
2019-02-26 19:45:29.685  INFO 38918 --- [           main] com.zaxxer.hikari.HikariDataSource       : HikariPool-1 - Shutdown initiated...
2019-02-26 19:45:29.707  INFO 38918 --- [           main] com.zaxxer.hikari.HikariDataSource       : HikariPool-1 - Shutdown completed.
2019-02-26 19:45:29.713  INFO 38918 --- [           main] o.apache.catalina.core.StandardService   : Stopping service [Tomcat]
</code></pre>

<p><code>qronicle-deployment.yaml</code></p>

<pre><code>apiVersion: v1
kind: Secret
metadata:
  name: actuator
  namespace: {{ .Release.Namespace }}
type: Opaque
data:
  actuator-password: {{ randAlphaNum 10 | b64enc | quote }}
....
- name: ACTUATOR_PASSWORD
  valueFrom:
    secretKeyRef:
      name: actuator
      key: actuator-password
</code></pre>

<p><code>application.properties</code></p>

<pre><code># spring boot actuator access control
management.endpoints.web.exposure.include=*
security.user.actuator-username=admin
security.user.actuator-password=${ACTUATOR_PASSWORD}
</code></pre>

<p><code>ACTUATOR_PASSWORD</code> is consumed here</p>

<pre><code>@Configuration
@EnableWebSecurity
class ActuatorSecurity : WebSecurityConfigurerAdapter() {
    @Value("\${security.user.actuator-username}")
    private val actuatorUsername: String? = null

    @Value("\${security.user.actuator-password}")
    private val actuatorPassword: String? = null

    ....
}
</code></pre>

JonB
<p>Usually for secrets you will mount it outside of the deployment yaml.  </p>

<p>Here you could run <code>kubectl create secret generic &lt;secret_name&gt; --from-literal &lt;secret_key&gt; ='&lt;password&gt;'</code> under the k8 context where the nodes are going to be running.  </p>

<p>This will create a secret there and the deployment yaml you have above will map it to an environment variable.</p>
