Make approved experiments prod use vault

components/ra/approved-experiments/base/deployment.yaml

@@ -22,6 +22,9 @@ spec:
           env:
             - name: FILTERS_PATH
               value: /app/filters.json
+          envFrom:
+            - secretRef:
+                name: approved-experiments
           volumeMounts:
             - name: common-views
               mountPath: "/app/build/common-views"

components/ra/approved-experiments/overlays/dev/deployment.yaml

@@ -8,6 +8,3 @@ spec:
       containers:
         - name: approved-experiments
           image: ghcr.io/isisbusapps/approved-experiments@sha256:9e63b784fd614f69cefa3a9ad3d261f460b8ffd6e1b5d912f09df5e96a37cf8d
-          envFrom:
-            - secretRef:
-                name: approved-experiments

components/ra/approved-experiments/overlays/prod/deployment.yaml

@@ -8,14 +8,3 @@ spec:
       containers:
         - name: approved-experiments
           image: ghcr.io/isisbusapps/approved-experiments:1.8.0
-          env:
-            - name: CONFIG_PATH
-              value: /FBS/.env
-          volumeMounts:
-            - name: env-config
-              mountPath: "/FBS"
-              readOnly: true
-      volumes:
-        - name: env-config
-          secret:
-            secretName: approved-experiments-environment

components/ra/approved-experiments/overlays/prod/static-auth.yaml

@@ -0,0 +1,16 @@
+apiVersion: secrets.hashicorp.com/v1beta1
+kind: VaultStaticSecret
+metadata:
+  name: approved-experiments
+  namespace: apps
+spec:
+  type: kv-v2
+  refreshAfter: 30s
+  vaultAuthRef: static-auth
+
+  mount: reviews_and_allocations
+  path: prod/approved-experiments
+  destination:
+    name: approved-experiments
+    overwrite: true
+    create: true