When using Vault Agent injection with ToolHive's Kubernetes operator, secrets are injected into the proxy runner pod at /vault/secrets, but they are not being passed to the actual workload StatefulSet pod.
- Vault agent successfully injects secrets into the proxy pod (visible in pod description)
- Secrets are mounted at
/vault/secretsin the proxy pod