Kubernetes, Spring Boot, Vault, Postgres, Docker.
secret from the Vault. To do this, it needs a valid Vault token that has the correct policy associated with it (myapp-db-policy). To get a token, Vault Agent must authenticate with Vault using its Kubernetes credentials (JWT) that it gets from its Kubernetes ServiceAccount (myapp-sa). This gives it