Integrate Vault as External Root CA with cert-manager

hi guys! Have you had any experience with integrate Vault as External Root CA with cert-manager? Maybe you have some HowTo? There is no official documentation, and there is little information…
I have istio version: 1.13.2