infra/kubernetes/atuin/VaultStaticSecret-postgres-atuin.yaml

apiVersion: secrets.hashicorp.com/v1beta1
kind: VaultDynamicSecret
metadata:
  name: postgres-atuin
  namespace: atuin
spec:
  allowStaticCreds: true
  destination:
    create: true
    name: postgres-atuin
    transformation:
      templates:
        ATUIN_DB_URI:
          text: postgres://{{ .Secrets.username }}:{{ .Secrets.password }}@192.168.50.236/atuin
  mount: database
  path: static-creds/atuin
  refreshAfter: 30s
  vaultAuthRef: vault
  rolloutRestartTargets:
    - name: atuin
      kind: Deployment