apiVersion: v1 kind: Secret type: Opaque metadata: name: vault-agent-approle-secret-${TENANT} data: secret-id: ${SECRET_ID} role-id: ${ROLE_ID}