Azure Key Vault Secret as an Environment Variable Reloaded Automatically in a Pod 

Name: example-secret Namespace: keyvault-demo Labels: secrets-store.csi.k8s.io/managed=true Annotations: Type: Opaque Data ==== examplesecretkey: 8 bytes

@@RoyKimYYZ it's mean value came here rite...then encoded in k8s secrets...if so there is no use from key vault, basically we using this instead of encode to encrypt. K8s secret doing encode we can see it easily by "kubectl edit secret example-secret" and decode the value.

@@ramallways6321 If you are saying the secret is not encrypted when retrieved from key vault. Then yes you are right. Key vault encrypts the secret at rest in the the key vault. If you want the secret to be encrypted in k8s secret, I think you have to encrypt the secret as you store in key vault and decrypt it when the key vault provider mounts into the pod.

If I Mount the secrets from key vault then how can I use that as environmental variables... without creating k8s secret

@@ramallways6321 I believe env variable requires k8s secret.