IssuerSpecVault | @pennlabs/kittyhawk

Vault configures this issuer to sign certificates using a HashiCorp Vault PKI backend.

schema: IssuerSpecVault

Hierarchy

IssuerSpecVault

Index

Properties

Readonly auth

auth: IssuerSpecVaultAuth

Auth configures how cert-manager authenticates with the Vault server.

schema: IssuerSpecVault#auth

Optional Readonly caBundle

caBundle: string

PEM-encoded CA bundle (base64-encoded) used to validate Vault server certificate. Only used if the Server URL is using HTTPS protocol. This parameter is ignored for plain HTTP protocol connection. If not set the system root certificates are used to validate the TLS connection.

schema: IssuerSpecVault#caBundle

Optional Readonly namespace

namespace: string

Name of the vault namespace. Namespaces is a set of features within Vault Enterprise that allows Vault environments to support Secure Multi-tenancy. e.g: "ns1" More about namespaces can be found here https://www.vaultproject.io/docs/enterprise/namespaces

schema: IssuerSpecVault#namespace

Readonly path

path: string

Path is the mount path of the Vault PKI backend's sign endpoint, e.g: "my_pki_mount/sign/my-role-name".

schema: IssuerSpecVault#path

Readonly server

server: string

Server is the connection address for the Vault server, e.g: "https://vault.example.com:8200".

schema: IssuerSpecVault#server