Webhook that injects secrets into pods

secret-injector/app_example.yaml

@@ -0,0 +1,52 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: app-example
+spec:
+  type: NodePort
+  selector:
+    app: app-example
+  ports:
+    - port: 5000
+      name: app-example
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: app-example
+spec:
+  selector:
+    matchLabels:
+      app: app-example
+  template:
+    metadata:
+      annotations:
+        operator.1password.io/inject: "app-example"
+      labels:
+        app: app-example
+    spec:
+      containers:
+        - name: app-example
+          command: ["./example"]
+          image: connect-app-example:latest
+          imagePullPolicy: Never
+          resources:
+            limits:
+              memory: "128Mi"
+              cpu: "0.2"
+          ports:
+            - containerPort: 5000
+          env:
+            - name: OP_VAULT
+              value: ApplicationConfiguration
+            - name: APP_TITLE
+              value: op://ApplicationConfiguration/Webapp/title
+            - name: BUTTON_TEXT
+              value: op://ApplicationConfiguration/Webapp/action
+            - name: OP_CONNECT_HOST
+              value: http://onepassword-connect:8080/
+            - name: OP_CONNECT_TOKEN
+              valueFrom:
+                secretKeyRef:
+                  name: onepassword-token
+                  key: token