certmanager v1.7

ClusterIssuer.spec.acme.solvers.http01.ingress.ingressTemplate.spec.vault.auth.kubernetes

Kubernetes authenticates with Vault by passing the ServiceAccount token stored in the named Secret resource to the Vault server.

ClusterIssuer.spec.acme.solvers.http01.ingress.ingressTemplate.spec.vault.auth.kubernetes fields and descriptions
Field / Type	Description
mountPath `string`	The Vault mountPath here is the mount path to use when authenticating with Vault. For example, setting a value to `/v1/auth/foo`, will use the path `/v1/auth/foo/login` to authenticate with Vault. If unspecified, the default value "/v1/auth/kubernetes" will be used.
role `string` required	A required field containing the Vault Role to assume. A Role binds a Kubernetes ServiceAccount with a set of Vault policies.
secretRef `object` required	The required Secret field containing a Kubernetes ServiceAccount JWT used for authenticating with Vault. Use of 'ambient credentials' is not supported.