How to store domain crt and key tls files in vault and k8s read from vault to generate secret?

Vault
1

how to store domain crt and key tls files in vault and k8s read from vault to generate secret?

2

vault kv put /tls/xxx.com key=@/tmp/xxx.com.key cert=@/tmp/xxx.com.crt

I store as kv