ClusterIssuer.spec.acme.solvers[].selector.matchLabels.spec.vault.auth
Auth configures how cert-manager authenticates with the Vault server.
| Field / Type | Description |
|---|---|
AppRole authenticates with Vault using the App Role auth mechanism, with the role and secret stored in a Kubernetes Secret resource. | |
AWS authenticates with Vault using AWS IAM authentication. This allows authentication using IAM roles for service accounts (IRSA), EKS Pod Identity (PIA), or ambient credentials (EC2 instance profiles, ECS task role). | |
ClientCertificate authenticates with Vault by presenting a client certificate during the request's TLS handshake. Works only when using HTTPS protocol. | |
Kubernetes authenticates with Vault by passing the ServiceAccount token stored in the named Secret resource to the Vault server. | |
TokenSecretRef authenticates with Vault by presenting a token. |