Otherwise, another day at work. Got Vault/asp core/certificates all working together nicely, including 30 second lifetime certificates (mostly as a stunt/for testing, but it's opened the door to 30 hour certificates, which are actually a significant security improvement).
I should look into Helm, since that's what $work want me to use, but the whole "yaml template" thing is just too terrible.
Ah, well. It's late and I should sleep. Hello anyone (still) reading, hope you're enjoying the show.