Results 3 comments of rich

yea can use the extraVolume and extraMount like: ``` extraVolumes: - name: certificate-authority secret: secretName: my-vault-ca optional: false extraVolumeMounts: - name: certificate-authority mountPath: /usr/local/share/ca-certificates readOnly: true ``` From man update-ca-certificates...

you can pass the external-secret pod extraEnv: ``` extraEnv: - name: VAULT_SKIP_VERIFY value: "true" ``` this is how the old KES used to do it

> Also, The same phenomenon occurred when I built and ran my self build. I solved this problem by adding `_"k8s.io/client-go/plugin/pkg/client/auth/gcp"` to `provider.go`. > > ``` > metav1 "k8s.io/apimachinery/pkg/apis/meta/v1" >...