Hi 👋 I have an issue with secrets mounting not working properly. I have prepared the following `workflow-execution-config`:

domain: ""
max_parallelism: 32
project: myproject
security_context:
  run_as:
    k8s_service_account: my-sa
  secrets:
    - group: my-secrets
      key: SECRET_A
    - group: my-secrets
      key: SECRET_B

The configuration is applied properly to my project:

flytectl update workflow-execution-config --project myproject --attrFile attr.yaml

and I see that it's there when I do:

flytectl get workflow-execution-config -p myproject

But when the pods are running for my workflows, the secrets are not mounted at all (pods don't even have any reference to them in their details). It seems like this configuration is completely ignored 🤔 Any hints how to debug it? Am I doing sth wrong?

I'm not sure the webhook reads this to mount secrets. Do you need to set the secret for all executions? Then probably a Pod template would be helpful

Do you need to set the secret for all executions?

Yes, for all executions in a given project

> Is it possible to define podtemplate at project level? atm you can configure it inline, or at the task level or at the namespace level. So the closest to project-PodTemplate binding would be creating it at the corresponding project-domain namespace (ref)