TLS
TLS is always used between the Vault units and from a Vault client to the server. By default, the charm generates self-signed certificates, and users can opt for a different TLS provider by leveraging the tls-certificates-access integration. To learn more about the various TLS providers in the Juju ecosystem, read this topic.
