title: Can't connect to mysql pod in Kubernetes when using Secrets for password (Access denied)
body: <p>I try to setup a mysql database in Kubernetes. I configured a ConfigMap to store the Database name and a Secret that contains the root password, the user and the password for the user.</p>
  
  <p>When I try to connect to the DB afterwards (Inside the container with mysql cli and from outside with IntelliJ Database tool) I get an "ERROR 1045 (28000): Access denied for user 'testadm'@'localhost' (using password: YES)" error.</p>
  
  <p>My kubernetes.yaml file:</p>
  
  <pre><code>apiVersion: v1
  kind: ConfigMap
  metadata:
    name: db
  data:
    mysql-database: database
  
  ---
  apiVersion: v1
  kind: Secret
  metadata:
     name: db-credentials
  type: Opaque
  data:
    mysql-root-password: VGVzdDEyMzQK # Test1234
    mysql-user: dGVzdGFkbQo= # testadm
    mysql-password: VGVzdDEyMzQK # Test1234
  
  ---
  apiVersion: apps/v1beta1
  kind: Deployment
  metadata:
    name: mysql
  spec:
    replicas: 1
    strategy:
      type: Recreate
    template:
      metadata:
        labels:
          app: mysql
      spec:
        containers:
          - name: mysql
            image: mysql:5.7
            ports:
              - containerPort: 3306
            env:
              - name: MYSQL_DATABASE
                valueFrom:
                  configMapKeyRef:
                    name: db
                    key: mysql-database
              - name: MYSQL_ROOT_PASSWORD
                valueFrom:
                  secretKeyRef:
                    name: db-credentials
                    key: mysql-root-password
              - name: MYSQL_USER
                valueFrom:
                  secretKeyRef:
                    name: db-credentials
                    key: mysql-user
              - name: MYSQL_PASSWORD
                valueFrom:
                  secretKeyRef:
                    name: db-credentials
                    key: mysql-password
  </code></pre>
  
  <p><strong>If I set the passwords directly like below the connection succeeds</strong> inside of the container and from the outside!</p>
  
  <pre><code>env:
    - name: MYSQL_ROOT_PASSWORD
      value: Test1234
  </code></pre>
  
  <p>If I inspect the env variables inside the container I can't spot a difference between the two approaches.</p>
  
  <p>Is there any additional formatting required to use the passwords stored in the secret? I also tried to place the values in the data-dictionary in quotes like this:</p>
  
  <pre><code>data:
    mysql-root-password: "VGVzdDEyMzQK"
  </code></pre>
  
  <p>Version information</p>
  
  <pre><code>Docker 17.06.0-ce
  Minikube 0.21.0
  Kubectl Server 1.7.0
  Kubectl Client 1.7.3
  </code></pre>