Vault agent injector configuration

hi , i have external vault server and i want to connect from k8s vault agent injector , can y help me how to config vault agent injector ? what is the best practice ?