Setting environment variables in deployment from Vault secret
I have configured delivery of secrets from Valt to kubernetes cluster. configured via CSI with creation of SecretProviderClass. secret put in volume:
...
volumeMounts:
- name: secrets-store-inline
mountPath: "/mnt/secrets-store"
readOnly: true
volumes:
- name: secrets-store-inline
csi:
driver: secrets-store.csi.k8s.io
readOnly: true
volumeAttributes:
secretProviderClass: "vault-database"
use:
cat /mnt/secrets-store/test_secret
i can read this secret
I need to set this secret in the deployment env DB_PASSWORD, for example.
how can I best do this?