apiVersion: secrets.hashicorp.com/v1beta1
kind: VaultAuth
metadata:
  name: vault
  namespace: cert-manager
spec:
  kubernetes:
    role: reader
    serviceAccount: default
  method: kubernetes
  mount: kubernetes