And shouldn't it read it from the storage configmap instead of env vars? Not even talking about having the secret key in the configmap instead of a secret...