vault-issuer.yaml

apiVersion: cert-manager.io/v1
kind: ClusterIssuer
metadata:
  name: vault-cluster-issuer
spec:
  vault:
    path: pki/sign/<insert PKI issuer here>
    server: https://<insert Vault server here>:8200
    caBundle: <base64 encoded caBundle PEM file>
    auth:
      appRole:
        path: approle
        roleId: "<insert roleId here>"
        secretRef:
          name: cert-manager-vault-approle
          key: secretId