Consul Connect Service port

I am trying to upgrade from consul 1.9.X to 1.10.X in kubernetes and am trying to deploy vault 1.6.2 within the mesh.

Vault deploys 4 services, vault, vault-ui, vault-agent-injector-svcj, and vault-internal.

Documentation suggests that I disable transparent proxy and set the connect-service and connect-service-port. The documentation for service port states

This is the port that the service is listening on. 

What service is being referred here? The exposed port on the container? Or The port exposed by the kubernetes service?

Additionally the kubernetes services vault, vault-internal, have 2 ports exposed. The documentation does not make it clear how to handle that situation.

How do I fill out connect-service and connect-service-port when the kubernetes service has multiple ports and target ports?