From bbb6a19e9cfcd3e091542b357265159b04828d3d Mon Sep 17 00:00:00 2001
From: Kochetkov S <kochetkov.s@sarex.io>
Date: Wed, 15 Apr 2026 12:13:36 +0300
Subject: [PATCH] add kafka support

---
 .../infrastructure/patches/kafka.yaml         | 19 ++++++++++++++-----
 infrastructure/kafka/base/helmrelease.yaml    |  2 +-
 2 files changed, 15 insertions(+), 6 deletions(-)

diff --git a/clusters/yc-k8s-test/infrastructure/patches/kafka.yaml b/clusters/yc-k8s-test/infrastructure/patches/kafka.yaml
index ac9180a..7125eed 100644
--- a/clusters/yc-k8s-test/infrastructure/patches/kafka.yaml
+++ b/clusters/yc-k8s-test/infrastructure/patches/kafka.yaml
@@ -24,16 +24,25 @@ spec:
     listeners:
       client:
         protocol: SASL_SSL
+    provisioning:
+      enabled: false
     sasl:
       managedExistingSecret:
-        enabled: true
-      existingSecret: kafka-kafka-contour-user-passwords
+        enabled: false
+      existingSecret: ""
       enabledMechanisms: PLAIN,SCRAM-SHA-512
       interBrokerMechanism: PLAIN
       controllerMechanism: PLAIN
       client:
-        users:
-          - sarex
+        users: []
         passwords: ""
     tls:
-      passwordsSecret: kafka-kafka-contour-tls-passwords
+      type: PEM
+    vault:
+      enabled: true
+      role: kafka
+      authPath: auth/kubernetes
+      secretPath: secrets/data/kafka/bootstrap
+      clusterIdKey: clusterId
+      interBrokerPasswordKey: interBrokerPassword
+      controllerPasswordKey: controllerPassword
diff --git a/infrastructure/kafka/base/helmrelease.yaml b/infrastructure/kafka/base/helmrelease.yaml
index 48b1fc2..d6334a8 100644
--- a/infrastructure/kafka/base/helmrelease.yaml
+++ b/infrastructure/kafka/base/helmrelease.yaml
@@ -8,7 +8,7 @@ spec:
   chart:
     spec:
       chart: kafka-contour
-      version: "0.1.3"
+      version: "0.1.5"
       sourceRef:
         kind: HelmRepository
         name: yc-oci-charts