#
# NOTE: Use this example with operator/deploy/cr-mysql-ha.yaml Vault CR

apiVersion: apps/v1
kind: Deployment
metadata:
  name: hello-secrets
spec:
  replicas: 1
  selector:
    matchLabels:
      app.kubernetes.io/name: hello-secrets
  template:
    metadata:
      labels:
        app.kubernetes.io/name: hello-secrets
      annotations:
        vault.security.banzaicloud.io/vault-addr: "https://vault:8200"
        vault.security.banzaicloud.io/vault-tls-secret: vault-tls
        vault.security.banzaicloud.io/vault-env-daemon: "true"
    spec:
      initContainers:
      containers:
      - name: mysql-client
        image: mysql:5.7
        command: ["sh", "-c", "echo mysql -h mysql -u ${MYSQL_USERNAME} -p${MYSQL_PASSWORD} && echo going to sleep... && sleep 10000"]
        env:
        - name: MYSQL_USERNAME
          value: vault:database/creds/app#username
        - name: MYSQL_PASSWORD
          value: vault:database/creds/app#password
        resources:
          limits:
            memory: "128Mi"
            cpu: "100m"