secret-and-pod.yaml

apiVersion: v1
kind: Secret
metadata:
  name: vsecret
  annotations:
    vault.security.banzaicloud.io/vault-addr: https://my-external.vault
    vault.security.banzaicloud.io/vault-namespace: MyTeams/Namespace
    vault.security.banzaicloud.io/vault-role: default
    vault.security.banzaicloud.io/vault-skip-verify: "true"
    vault.security.banzaicloud.io/vault-path: my-kube-path
    vault.security.banzaicloud.io/vault-serviceaccount: default

type: Opaque
data:
  foo: <#base64 encoded vault path#>
---
# Working Pod
apiVersion: v1
kind: Pod
metadata:
  name: simple-pod
  annotations:
    vault.security.banzaicloud.io/vault-addr: https://my-external.vault
    vault.security.banzaicloud.io/vault-namespace: MyTeams/Namespace
    vault.security.banzaicloud.io/vault-role: default
    vault.security.banzaicloud.io/vault-skip-verify: "true"
    vault.security.banzaicloud.io/vault-path: my-kube-path
    vault.security.banzaicloud.io/vault-serviceaccount: default
spec:
  containers:
    - name: simple-pod
      image: alpine
      imagePullPolicy: Always
      command: ["tail", "-f", "/dev/null"]
      envFrom:
        - secretRef:
            name: vsecret