Pod Definition with Secret CSI

pod-with-csi.yaml

# This is a sample pod definition for using SecretProviderClass and service-principal to access Keyvault
kind: Pod
apiVersion: v1
metadata:
  name: busybox-secrets-store-inline
spec:   
  containers:
  - name: busybox
    image: busybox
    command:
      - "/bin/sleep"
      - "10000"
    volumeMounts:
    - name: secrets-store-inline
      mountPath: "/mnt/secrets-store"
      readOnly: true
    env:
    - name: APP_USERNAME
      valueFrom:
        secretKeyRef:
          key: username
          name: csi-secrets 
    - name: APP_PASSWORD
      valueFrom:
        secretKeyRef:
          key: password
          name: csi-secrets
  volumes:
    - name: secrets-store-inline
      csi:
        driver: secrets-store.csi.k8s.io
        readOnly: true
        volumeAttributes:
          secretProviderClass: "azure-kvname"
        nodePublishSecretRef:                    
          name: secrets-store-creds