Fetching Vault secrets using the Vault Agent
The Vault Agent provide a way to communicate with Vault. It handles the authentication and provide feature like templating and refreshing secrets.
The Platon PaaS cluster has been configured such that Kubernetes Service Accounts can authenticate with vault.sikt.no. Defined by a Vault role and policy you must request created by the Platon team, a given Service Account will be given access to the secrets needed.
See this project for an example deploy using Vault Agent: