add vault support

clusters/yc-k8s-test/infrastructure/patches/camunda.yaml

@@ -8,6 +8,10 @@ spec:
   timeout: 15m
   values:
     global:
+      vault:
+        enabled: true
+        role: camunda
+        authPath: auth/kubernetes
       image:
         pullSecrets:
           - name: regcred
@@ -27,20 +31,40 @@ spec:
           console:
             redirectUrl: "https://camunda-console.contour.infra.sarex.tech"
     identityPostgresql:
+      auth:
+        usePasswordFiles: true
       primary:
         persistence:
           size: 10Gi
           storageClass: local-path
     identityKeycloak:
+      vaultEnv:
+        enabled: true
+        role: camunda
+        authPath: auth/kubernetes
+        envFiles:
+          KEYCLOAK_ADMIN_PASSWORD:
+            path: secrets/data/camunda/keycloak-admin
+            key: admin-password
+          KEYCLOAK_PASSWORD:
+            path: secrets/data/camunda/keycloak-admin
+            key: admin-password
+          KEYCLOAK_DATABASE_PASSWORD:
+            path: secrets/data/camunda/postgresql
+            key: password
       global:
         storageClass: local-path
       tolerations: []
       postgresql:
+        auth:
+          usePasswordFiles: true
         primary:
           persistence:
             size: 10Gi
             storageClass: local-path
     postgresql:
+      auth:
+        usePasswordFiles: true
       primary:
         persistence:
           size: 10Gi

infrastructure/camunda/base/helmrelease.yaml

@@ -13,7 +13,7 @@ spec:
   chart:
     spec:
       chart: camunda-contour
-      version: "11.0.10"
+      version: "11.0.11"
       sourceRef:
         kind: HelmRepository
         name: yc-oci-charts