Wire Vault Kubernetes authentication for a service using hvac. Use this skill when adding or modifying Vault auth in any Kubernetes-deployed service — always read the Vault role and mount path from environment variables, never hardcode them.
Services on Kubernetes authenticate to Vault using the Kubernetes auth method
via the hvac library. This applies to any Python service the team deploys on
the cluster — not just Dagster.
Never hardcode the Vault role or mount path. Always read them from environment