apiVersion: v1
kind: ReplicationController
metadata:
  name: mysql
  labels:
    name: mysql
spec:
  replicas: 1
  selector:
    name: mysql
    version: v1
  template:
    metadata:
      labels:
        name: mysql
        version: v1
        secrets_namespace: wordpress
    spec:
      containers:
        - name: mysql
          image: mysql
          command: ["/custodia/go-secret"]
          args: ["/entrypoint.sh", "mysqld"]
          ports:
            - containerPort: 3306
              name: mysql
          env:
            - name: SECRET_MYSQL_ROOT_PASSWORD
              value: db_password
          volumeMounts:
            - name: mysql-persistent-storage
              mountPath: /var/lib/mysql
            - name: custodia
              mountPath: /custodia
              readOnly: true
      volumes:
        - name: mysql-persistent-storage
          persistentVolumeClaim:
            claimName: myclaim-db
        - name: custodia
          hostPath:
            path: /var/lib/custodia/client