Vault-agent-init error authenticating - certificate signed by unknown authority

[JnMik]

Hey @popopanda, I believe I am now facing the same issue as you.

Bad certificate in vault-agent-injector

Hello guys ! I’m trying to have a functional Vault in Kubernetes using the most recent helm chart, with the Raft protocol and the TLS. I believe I managed to get it about 90% completion, but there is something with the TLS that doesn’t work. So to generate the certificate, I used the jetstack/cert-manager (pretty common in Kubernetes), which create a k8s secret (vault-tls). In the helm chart, I refer the “secretName” property as vault-tls. I also specific the 3 TLS “files” in the config liste…

Can you tell me how you figure out to keep TLS for servers, but keep agent injector with his “self-generated certificate” ?

I tried that annotation as well on the containers
“vault.hashicorp.com/ca-cert” = “/run/secrets/kubernetes.io/serviceaccount/ca.crt”

But it doesn’t help ?

thanks !