apiVersion : apps/v1
kind: Deployment
metadata:
  name: "trips"
  namespace: "api"
spec:
  replicas: 2
  selector:
    matchLabels:
      app: "trips"
  template:
    metadata:
      labels:
        app: "trips"
    spec:
      containers:
        - name: "trips"
          image: "registrymdf7461.azurecr.io/trips:1.0"
          ports:
          - containerPort: 80
          volumeMounts:
          - name: secrets-store01-inline
            mountPath: "/secrets"
            readOnly: true
          env:
          - name: SQL_PASSWORD
            valueFrom: 
              secretKeyRef: 
                name: fromvksecrets
                key: sqlpasswordkey
      volumes:
      - name: secrets-store01-inline
        csi:
          driver: secrets-store.csi.k8s.io
          readOnly: true
          volumeAttributes:
            secretProviderClass: "azure-sync"