apiVersion: v1
kind: Pod
metadata:
  labels:
    app: nginx-flex-kv-podid
    aadpodidbinding: "NAME OF the AzureIdentityBinding SELECTOR"
  name: nginx-flex-kv-podid
spec:
  containers:
  - name: nginx-flex-kv-podid
    image: nginx
    volumeMounts:
    - name: test
      mountPath: /kvmnt
      readOnly: true
  volumes:
  - name: test
    flexVolume:
      driver: "azure/kv"
      options:
        usePodIdentity: "true"
        keyvaultname: ""
        keyvaultobjectname: ""
        keyvaultobjecttype: secret # OPTIONS: secret, key, cert
        keyvaultobjectversion: ""
        resourcegroup: ""
        subscriptionid: ""
        tenantid: ""
