Docs/Secrets/Kubernetes Secret Injection

Kubernetes & Cloud Workload Secret Injection

Inject decrypted environment variables directly into Kubernetes Pods and Vyntech Cloud workloads without persisting plaintext values into manifests or etcd.

Init Container Injection Pattern

Mount an in-memory emptyDir (medium: Memory) volume populated at pod startup by the Vyntech Vault Agent:

apiVersion: apps/v1
kind: Deployment
metadata:
  name: api-server
spec:
  template:
    spec:
      initContainers:
        - name: vault-inject
          image: vyntech/vault-agent:v1.2.0
          env:
            - name: VAULT_SERVICE_ACCOUNT_KEY
              valueFrom:
                secretKeyRef:
                  name: vault-credentials
                  key: token
            - name: VAULT_PROJECT
              value: "ecommerce"
            - name: VAULT_ENV
              value: "production"
          volumeMounts:
            - name: secrets-vol
              mountPath: /vault/secrets
      volumes:
        - name: secrets-vol
          emptyDir:
            medium: Memory