apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
  name: kafka
  namespace: kafka
spec:
  interval: 5m
  timeout: 10m
  values:
    defaultInitContainers:
      prepareConfig:
        extraInit: |
          perl -0pi -e 's/password="\s*([^"\n]+)"/password="$1"/g' /config/server.properties
          perl -0pi -e 's/user_controller_user="\s*([^"\n]+)"/user_controller_user="$1"/g' /config/server.properties
          perl -0pi -e 's/user_inter_broker_user="\s*([^"\n]+)"/user_inter_broker_user="$1"/g' /config/server.properties
          perl -0pi -e 's/node\.id=(\d+)ssl\.keystore\.key=/node.id=$1\nssl.keystore.key=/g' /config/server.properties
    global:
      imagePullSecrets:
        - regcred
      defaultStorageClass: local-path
    image:
      pullSecrets:
        - regcred
    controller:
      replicaCount: 1
      automountServiceAccountToken: true
      persistence:
        size: 8Gi
        storageClass: local-path
    broker:
      replicaCount: 0
      automountServiceAccountToken: true
    listeners:
      client:
        protocol: SASL_SSL
    provisioning:
      enabled: false
    sasl:
      managedExistingSecret:
        enabled: false
      existingSecret: ""
      enabledMechanisms: PLAIN,SCRAM-SHA-512
      interBrokerMechanism: PLAIN
      controllerMechanism: PLAIN
      client:
        users: []
        passwords: ""
    tls:
      type: PEM
    vault:
      enabled: true
      role: kafka
      authPath: auth/kubernetes
      secretPath: secrets/data/kafka/bootstrap
      clusterIdKey: clusterId
      interBrokerPasswordKey: interBrokerPassword
      controllerPasswordKey: controllerPassword