---
vault:
  addr: https://vault.service.consul:8200
  auth_method: kubernetes
  k8s_mount: k8s/au/syd1
  k8s_role: puppet_sshsigner
  jwt_path: /var/run/secrets/kubernetes.io/serviceaccount/token
  mount_point: sshca
  role_name: signhost
  tls_skip_verify: false
  timeout: 30s