apiVersion: v1
kind: ServiceAccount
metadata:
  name: vault-secrets-operator-controller-manager
  namespace: {{ .Release.Namespace }}
---
apiVersion: secrets.hashicorp.com/v1beta1
kind: VaultConnection
metadata:
  name: vault-connection-infra
  namespace: {{ .Release.Namespace }}
spec:
  address: http://vault:8200
  skipTLSVerify: true
---
apiVersion: secrets.hashicorp.com/v1beta1
kind: VaultAuth
metadata:
  name: vault-auth-infra
  namespace: {{ .Release.Namespace }}
spec:
  vaultConnectionRef: vault-connection-infra
  method: kubernetes
  mount: kubernetes
  kubernetes:
    role: velero-role
    serviceAccount: vault-secrets-operator-controller-manager
    audiences:
      - vault
---
apiVersion: secrets.hashicorp.com/v1beta1
kind: VaultStaticSecret
metadata:
  name: velero-static-s3-secret
  namespace: {{ .Release.Namespace }}
spec:
  mount: kvv2
  type: kv-v2
  path: velero/config
  refreshAfter: 5m
  destination:
    create: true
    name: velero-static-s3-secret
  vaultAuthRef: vault-auth-infra