certmanager v1.7

Issuer.spec.acme.solvers[].http01.gatewayHTTPRoute.spec.vault

Vault configures this issuer to sign certificates using a HashiCorp Vault PKI backend.

5 fields
Issuer.spec.acme.solvers[].http01.gatewayHTTPRoute.spec.vault fields and descriptions
Field / TypeDescription
object required

Auth configures how cert-manager authenticates with the Vault server.

caBundle
string

PEM-encoded CA bundle (base64-encoded) used to validate Vault server certificate. Only used if the Server URL is using HTTPS protocol. This parameter is ignored for plain HTTP protocol connection. If not set the system root certificates are used to validate the TLS connection.

  • format: byte
namespace
string

Name of the vault namespace. Namespaces is a set of features within Vault Enterprise that allows Vault environments to support Secure Multi-tenancy. e.g: "ns1" More about namespaces can be found here https://www.vaultproject.io/docs/enterprise/namespaces

path
string required

Path is the mount path of the Vault PKI backend's `sign` endpoint, e.g: "my_pki_mount/sign/my-role-name".

server
string required

Server is the connection address for the Vault server, e.g: "https://vault.example.com:8200".