vault-tls-cert-auth.yml

- type: replace
  path: /instance_groups/name=web/jobs/name=web/properties/vault?
  value:
    url: https://((vault_host)):8200
    tls:
      ca_cert:
        certificate: ((vault_cert.ca))
      client_cert: ((vault_client_cert))
    auth:
      backend: cert

- type: replace
  path: /variables/-
  value:
    name: vault_client_cert
    type: certificate
    options:
      is_ca: true
      common_name: concourse