From 696afc12227247f692de292d15a1a618bbae0d53 Mon Sep 17 00:00:00 2001
From: Kochetkov S <kochetkov.s@sarex.io>
Date: Tue, 14 Apr 2026 11:46:45 +0300
Subject: [PATCH] reconfigure kafka for sasl_ssl

---
 .../infrastructure/patches/kafka.yaml         | 37 +++++++++++++++----
 1 file changed, 30 insertions(+), 7 deletions(-)

diff --git a/clusters/yc-k8s-test/infrastructure/patches/kafka.yaml b/clusters/yc-k8s-test/infrastructure/patches/kafka.yaml
index 59ee2f6..9922129 100644
--- a/clusters/yc-k8s-test/infrastructure/patches/kafka.yaml
+++ b/clusters/yc-k8s-test/infrastructure/patches/kafka.yaml
@@ -7,10 +7,33 @@ spec:
   interval: 5m
   timeout: 10m
   values:
-    global:
-      defaultStorageClass: local-path
-    controller:
-      replicaCount: 1
-      persistence:
-        size: 8Gi
-        storageClass: local-path
+    imagePullSecrets:
+      - regcred
+    kafkaUsers:
+      - name: admin-user
+        authentication:
+          type: scram-sha-512
+      - name: sarex
+        authentication:
+          type: scram-sha-512
+    kafka:
+      replicas: 1
+      listeners:
+        - name: plain
+          port: 9092
+          type: internal
+          tls: false
+        - name: tls
+          port: 9093
+          type: internal
+          tls: true
+          authentication:
+            type: scram-sha-512
+      storage:
+        type: jbod
+        volumes:
+          - id: 0
+            type: persistent-claim
+            size: 8Gi
+            deleteClaim: false
+            class: local-path