add vault injector

kustomize/sd3/frontend/base/deployment.yaml

@@ -28,3 +28,45 @@ spec:
             limits:
               cpu: 200m
               memory: 256Mi
+      volumeMounts:
+        - mountPath: "/secrets"
+          name: "secrets"
+      initContainers:
+      - name: "vault-agent"
+        command:
+        - "sh"
+        - "-c"
+        - "vault agent -config=/etc/vault/vault-agent.hcl -exit-after-auth=true"
+        env:
+        - name: "VAULT_ADDR"
+          value: "https://vault-lb.eco.tsi-dev.otc-service.com:8200"
+        image: "hashicorp/vault"
+        resources:
+          limits:
+            cpu: "300m"
+            memory: "300Mi"
+          requests:
+            cpu: "50m"
+            memory: "50Mi"
+        volumeMounts:
+        - mountPath: "/etc/vault"
+          name: "vault-agent-config"
+        - mountPath: "/secrets"
+          name: "secrets"
+        - mountPath: "/var/run/secrets/tokens"
+          name: "k8-tokens"
+          readOnly: true
+      volumes:
+      - name: vault-agent-config
+        configMap:
+          defaultMode: 420
+          name: sd3-front-vault-config
+      - name: secrets
+        emptyDir: {}
+      - name: "k8-tokens"
+        projected:
+          defaultMode: 420
+          sources:
+          - serviceAccountToken:
+              expirationSeconds: 7200
+              path: "vault-token"