apiVersion: secrets.hashicorp.com/v1beta1
kind: VaultDynamicSecret
metadata:
  name: postgres-soju
  namespace: soju
spec:
  allowStaticCreds: true
  destination:
    create: true
    name: postgres-soju
    transformation:
  mount: database
  path: static-creds/soju
  refreshAfter: 30s
  vaultAuthRef: vault
  rolloutRestartTargets:
    - name: soju
      kind: Deployment