Hello,
I did some research on the issue you are having and i compared your yamls with mine and they seems to be matching.
The starting point for an investigation would be to verify that your pod is actually using the vault-auth SA. I think this thread will be useful for you : Kubernetes Authentication denied
Martin