#apiVersion: cert-manager.io/v1
#kind: Issuer
#metadata:
#  name: vault-issuer
#  namespace: istio-system
#spec:
#  ca:
#    secretName: ca-key-pair