fixups and mount the secret!

Signed-off-by: Martyn Ranyard <m@rtyn.berlin>

apps-helm/sshtunnel/templates/deployment.yaml

@@ -17,7 +17,6 @@ spec:
       {{- with .Values.podAnnotations }}
         {{- toYaml . | nindent 8 }}
       {{- end }}
-        checksum/secret: {{ include (print $.Template.BasePath "/secret.yaml") . | sha256sum }}
       labels:
         {{- include "sshtunnel.selectorLabels" . | nindent 8 }}
     spec:
@@ -46,13 +45,15 @@ spec:
           resources:
             {{- toYaml .Values.resources | nindent 12 }}
           volumeMounts:
-          - mountPath: /keyfile
+          - mountPath: "/keyfile"
             name: keyfile
       volumes:
       - name: keyfile
-        secret:
-          defaultMode: 256
-          secretName: {{ .Chart.Name }}-keyfile
+        csi:
+          driver: secrets-store.csi.k8s.io
+          readOnly: true
+          volumeAttributes:
+            secretsProviderClass: app-secrets
       {{- with .Values.nodeSelector }}
       nodeSelector:
         {{- toYaml . | nindent 8 }}