---
apiVersion: v1
kind: Pod
metadata:
  name: app
  namespace: staging
  annotations: {
    "envconsul-injector.vault.crd.gocardless.com/configs": "app:config/app.yaml"
  }
spec:
  serviceAccountName: secret-reader
  containers:
    - name: app
      command:
        - echo
        - inject
        - only
