Add new file

kafka/templates/vault-setup.yaml

@@ -0,0 +1,43 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  namespace: {{ .Release.Namespace }}
+  name: vault-secrets-operator-controller-manager
+---
+apiVersion: secrets.hashicorp.com/v1beta1
+kind: VaultConnection
+metadata:
+  name: vault-connection
+  namespace: {{ .Release.Namespace }}
+spec:
+  address: http://vault.vault.svc.cluster.local:8200
+  skipTLSVerify: true
+---
+apiVersion: secrets.hashicorp.com/v1beta1
+kind: VaultAuth
+metadata:
+  name: vault-auth
+  namespace: {{ .Release.Namespace }}
+spec:
+  method: kubernetes
+  mount: kubernetes
+  kubernetes:
+    role: kafka-role
+    serviceAccount: vault-secrets-operator-controller-manager
+    audiences:
+      - vault
+---
+apiVersion: secrets.hashicorp.com/v1beta1
+kind: VaultStaticSecret
+metadata:
+  name: kafka-static-user-passwords
+  namespace: {{ .Release.Namespace }}
+spec:
+  mount: kvv2
+  type: kv-v2
+  path: kafka/config
+  refreshAfter: 5m
+  destination:
+    create: true
+    name: kafka-static-user-passwords
+  vaultAuthRef: vault-auth