secured-fruits-catalog-k8s-with-agent-deployment.yml #openshift #vault

with-agent-deployment.yml

apiVersion: apps.openshift.io/v1
kind: DeploymentConfig
[...]
spec:
  template:
    metadata:
      annotations:
        vault.hashicorp.com/agent-inject: "true"
        vault.hashicorp.com/agent-init-first: "true"
        vault.hashicorp.com/agent-inject-status: "update"
        vault.hashicorp.com/agent-inject-secret-application.properties: "database/creds/fruit-catalog-role"
        vault.hashicorp.com/agent-inject-template-application.properties: |
          {{- with secret "database/creds/fruit-catalog-role" -}}
          spring.data.mongodb.uri=mongodb://{{ .Data.username }}:{{ .Data.password }}@mongodb/sampledb
          {{- end }}
        vault.hashicorp.com/secret-volume-path-application.properties: "/deployments/config/"
        vault.hashicorp.com/agent-pre-populate-only: "true"
        vault.hashicorp.com/role: "fruits-catalog"
        vault.hashicorp.com/tls-skip-verify : "true"
    [...]