vault

sealed-secret/deployment.yaml

@@ -21,11 +21,11 @@ spec:
       - image: siddharth67/sealed-secrets:v1
         name: secret-app
       # uncomment block to mount secret
-#         volumeMounts:
+        volumeMounts:
-#         - name: app-secret-vol
+        - name: app-secret-vol
-#           mountPath: "/app/crds"
+          mountPath: "/app/crds"
-#           readOnly: true
+          readOnly: true
-#       volumes:
+      volumes:
-#       - name: app-secret-vol
+      - name: app-secret-vol
-#         secret:
+        secret:
-#           secretName: app-crds
+          secretName: app-crds

vault-secrets/deployment.yaml

@@ -0,0 +1,31 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  creationTimestamp: null
+  labels:
+    app: secret-app
+  name: secret-app
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: secret-app
+  strategy: {}
+  template:
+    metadata:
+      creationTimestamp: null
+      labels:
+        app: secret-app
+    spec:
+      containers:
+      - image: siddharth67/sealed-secrets:v1
+        name: secret-app
+      # uncomment block to mount secret
+#         volumeMounts:
+#         - name: app-secret-vol
+#           mountPath: "/app/crds"
+#           readOnly: true
+#       volumes:
+#       - name: app-secret-vol
+#         secret:
+#           secretName: app-crds

vault-secrets/secret.yaml

@@ -1,7 +1,7 @@
 kind: Secret
 apiVersion: v1
 metadata:
-  name: example-secret
+  name: app-crds
   annotations:
     avp.kubernetes.io/path: "app/data/crds"
 type: Opaque

vault-secrets/service.yaml

@@ -0,0 +1,15 @@
+apiVersion: v1
+kind: Service
+metadata:
+  creationTimestamp: null
+  labels:
+    app: secret-app
+  name: secret-app
+spec:
+  ports:
+  - port: 80
+    protocol: TCP
+    targetPort: 80
+  selector:
+    app: secret-app
+  type: NodePort