From 58019f9eb1ab7bcc632c7d7d0d161bf93e28f703 Mon Sep 17 00:00:00 2001
From: inikulin <inikulin@co-work.ru>
Date: Wed, 4 Jun 2025 10:28:48 +0000
Subject: [PATCH] Add new file

---
 kafka/templates/vault-setup.yaml | 43 ++++++++++++++++++++++++++++++++
 1 file changed, 43 insertions(+)
 create mode 100644 kafka/templates/vault-setup.yaml

diff --git a/kafka/templates/vault-setup.yaml b/kafka/templates/vault-setup.yaml
new file mode 100644
index 0000000..5063bb7
--- /dev/null
+++ b/kafka/templates/vault-setup.yaml
@@ -0,0 +1,43 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  namespace: {{ .Release.Namespace }}
+  name: vault-secrets-operator-controller-manager
+---
+apiVersion: secrets.hashicorp.com/v1beta1
+kind: VaultConnection
+metadata:
+  name: vault-connection
+  namespace: {{ .Release.Namespace }}
+spec:
+  address: http://vault.vault.svc.cluster.local:8200
+  skipTLSVerify: true
+---
+apiVersion: secrets.hashicorp.com/v1beta1
+kind: VaultAuth
+metadata:
+  name: vault-auth
+  namespace: {{ .Release.Namespace }}
+spec:
+  method: kubernetes
+  mount: kubernetes
+  kubernetes:
+    role: kafka-role
+    serviceAccount: vault-secrets-operator-controller-manager
+    audiences:
+      - vault
+---
+apiVersion: secrets.hashicorp.com/v1beta1
+kind: VaultStaticSecret
+metadata:
+  name: kafka-static-user-passwords
+  namespace: {{ .Release.Namespace }}
+spec:
+  mount: kvv2
+  type: kv-v2
+  path: kafka/config
+  refreshAfter: 5m
+  destination:
+    create: true
+    name: kafka-static-user-passwords
+  vaultAuthRef: vault-auth
\ No newline at end of file