certmanager v1.21.1

ClusterIssuer.spec.vault.auth.aws.iamRoleArn

The ARN of the AWS IAM role to assume using the Kubernetes service account token. Required when using IRSA (serviceAccountRef is set). This role must have a trust policy that allows the OIDC provider to assume it.

ClusterIssuer.spec.vault.auth.aws.iamRoleArn fields and descriptions
Field / Type	Description
ClusterIssuer.spec.vault.auth.aws.iamRoleArn `string`	The ARN of the AWS IAM role to assume using the Kubernetes service account token. Required when using IRSA (serviceAccountRef is set). This role must have a trust policy that allows the OIDC provider to assume it.