apiVersion: apps/v1
kind: Deployment
metadata:
  name: vault-test-bbb-fail
  namespace: bbb
spec:
  replicas: 1
  selector:
    matchLabels:
      app.kubernetes.io/name: vault
  template:
    metadata:
      labels:
        app.kubernetes.io/name: vault
        app: bbb
      annotations:
        vault.security.banzaicloud.io/vault-role: "bbb" # optional, the default value is the name of the ServiceAccount the Pod runs in, in case of Secrets and ConfigMaps it is "default"
        vault.security.banzaicloud.io/vault-skip-verify: "true" # optional, skip TLS verification of the Vault server certificate
        vault.security.banzaicloud.io/vault-path: "kubernetes" # optional, the Kubernetes Auth mount path in Vault the default value is "kubernetes"
    spec:
      serviceAccountName: bbb
      containers:
      - name: alpine
        image: alpine
        command: ["sh", "-c", "echo Direct Env : $BBB_SECRET_DATA_DIRECT_ENV && echo going to sleep... && sleep 10000"]
        env:
        - name: AAA_SECRET_DATA_DIRECT_ENV
          value: vault:secret/data/sandbox/aaa#AAA_SECRET_DATA_DIRECT_ENV

