That's the idea, if you are using the annotation and the secret path an init container called copy-vault-env should be injected

So if you want to see the real value coming from the main process you should use /vault/vault-env env and this will translate the secret paths for the actual secrets!

Best,

JC