certmanager v1.14
ClusterIssuer.spec.vault.auth.kubernetes.serviceAccountRef
A reference to a service account that will be used to request a bound token (also known as "projected token"). Compared to using "secretRef", using this field means that you don't rely on statically bound tokens. To use this field, you must configure an RBAC rule to let cert-manager request a token.
| Field / Type | Description |
|---|---|
TokenAudiences is an optional list of extra audiences to include in the token passed to Vault. The default token consisting of the issuer's namespace and name is always included. | |
name | Name of the ServiceAccount used to request a token. |