# # NOTE: Use this example with operator/deploy/cr-mysql-ha.yaml Vault CR apiVersion: apps/v1 kind: Deployment metadata: name: hello-secrets spec: replicas: 1 selector: matchLabels: app.kubernetes.io/name: hello-secrets template: metadata: labels: app.kubernetes.io/name: hello-secrets annotations: vault.security.banzaicloud.io/vault-addr: "https://vault:8200" vault.security.banzaicloud.io/vault-tls-secret: vault-tls vault.security.banzaicloud.io/vault-env-daemon: "true" spec: initContainers: containers: - name: mysql-client image: mysql:5.7 command: ["sh", "-c", "echo mysql -h mysql -u ${MYSQL_USERNAME} -p${MYSQL_PASSWORD} && echo going to sleep... && sleep 10000"] env: - name: MYSQL_USERNAME value: vault:database/creds/app#username - name: MYSQL_PASSWORD value: vault:database/creds/app#password resources: limits: memory: "128Mi" cpu: "100m"