apiVersion: apps/v1
kind: Deployment
metadata:
  creationTimestamp: null
  labels:
    app: secret-app
  name: secret-app
spec:
  replicas: 1
  selector:
    matchLabels:
      app: secret-app
  strategy: {}
  template:
    metadata:
      creationTimestamp: null
      labels:
        app: secret-app
    spec:
      containers:
      - image: siddharth67/secrets:vault
        imagePullPolicy: Always
        name: secret-app
      # uncomment block to mount secret
        volumeMounts:
        - name: app-secret-vol
          mountPath: "/app/crds"
          readOnly: true
      volumes:
      - name: app-secret-vol
        secret:
          secretName: app-crds