ekscsism_host_deployment.yml

apiVersion: apps/v1
kind: Deployment
metadata:
  name: secret-fetcher
  labels:
    app: secret-fetcher
spec:
  replicas: 1
  selector:
    matchLabels:
      app: secret-fetcher
  template:
    metadata:
    
      name: secret-fetcher
      labels:
        app: secret-fetcher
    spec:
      serviceAccountName: our-eks-sa-name
      
      volumes:
      - name: secrets-store-inline
        csi:
          driver: secrets-store.csi.k8s.io
          readOnly: true
          volumeAttributes:
            secretProviderClass: "secrets-provider-name"
      
      containers:
        - name: secret-fetcher
          image: your-docker-username/your-docker-container-repo-name:latest
          volumeMounts:
            - name: secrets-store-inline
              mountPath: "/mnt/secrets-store"
              readOnly: true