Webhook: vault-ct-secrets-mount-subpath, vault-agent-secrets-mount-subpath

[spanarek]

Usually, application directory contains many files, configuration, binary, etc..

$ ls /opt/my-app
bin my.conf my-app

When i use: vault.security.banzaicloud.io/vault-ct-secrets-mount-path: "/opt/my-app" My application directory will replaced and app crashed.

The solution might be like this... vault.security.banzaicloud.io/vault-ct-secrets-mount-subpath: "/opt/my-app/my.conf" Then, only one file will be replaced...

Currently I use symlink to file in image as workaround....

RUN ln -s /vault/secrets/my.conf /opt/my.conf