openssl req -newkey rsa:2048 -nodes -keyout vault.key -x509 -days 365 -out vault.crt -subj "/CN=vault"
kubernetes secret に格納するとき
kubectl create secret tls vault-tls \ --cert=vault.crt \ --key=vault.key \ -n vault