Hashicorp Vault has a PKI backend that allows for the issuance and renewal of TLS certificates.

We should look to support it within cert-manager as an Issuer type.

https://www.vaultproject.io/