<p>I am setting up Vault in Kubernetes and enabling the Kubernetes Auth method. It needs the Kubernetes CA Certificate. How do I obtain that? I couldn't find much on duckduckgo's search results.</p>

<p><a href="https://i.stack.imgur.com/cnNbB.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/cnNbB.png" alt="enter image description here"></a></p>

<p>Running kubernetes inside Docker for mac on MacOS Mojave:</p>

<p><a href="https://i.stack.imgur.com/16JSX.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/16JSX.png" alt="enter image description here"></a>
Thank you.</p>

user674669
<p>This can be found in your <code>kube-system</code> (or any other) namespace by running the following on your <code>default-token</code> secret:</p>

<pre><code>kubectl get secret &lt;secret name&gt; -n &lt;namespace&gt; -o jsonpath="{['data']['ca\.crt']}" | base64 --decode
</code></pre>

<p>To find the <code>secret name</code> run <code>kubectl get secret -n kube-system</code> and find the secret that starts with <code>default-token</code>.</p>

<p>This will give you something like:</p>

<pre><code>-----BEGIN CERTIFICATE-----
XXXXXXX
XXXX....
-----END CERTIFICATE-----
</code></pre>

<p>When you are entering this certificate, make sure to enter the BEGIN and END header and footer.</p>
