update

infra/cert-manager/templates/vault-issuer.yaml

@@ -0,0 +1,15 @@
+apiVersion: cert-manager.io/v1
+kind: Issuer
+metadata:
+  name: vault-issuer
+  namespace: sandbox
+spec:
+  vault:
+    path: pki/sign/infra
+    server: https://vault.local
+    auth:
+      kubernetes:
+        role: vault-issuer-role
+        mountPath: /v1/auth/jwt-cluster001
+        serviceAccountRef:
+          name: vault-issuer

infra/vault/templates/sa.yaml

@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: issuer

infra/vault/templates/secret-store.yaml

@@ -14,3 +14,4 @@ spec:
           role: "external-secrets"
           serviceAccountRef:
             name: "vault"
+