apiVersion: helm.cattle.io/v1
kind: HelmChartConfig
metadata:
  name: vault-secrets-operator
spec:
  valuesContent: |-
    defaultVaultConnection:
      # toggles the deployment of the VaultAuthMethod CR
      # @type: boolean
      enabled: true

      # Address of the Vault Server
      # @type: string
      # Example: http://vault.kube-system.svc.cluster.local:8200
      address: "http://vault.kube-system.svc.cluster.local:8200"

      # SkipTLSVerify for TLS connections.
      # @type: boolean
      skipTLSVerify: true
 
    defaultAuthMethod:
      enabled: true

      # Kubernetes namespace glob patterns which are allow-listed for use with the default AuthMethod.
      # @type: array<string>
      allowedNamespaces:
        - "*"

      method: kubernetes

      mount: kubernetes

      kubernetes:
        # Vault Auth Role to use
        # This is a required field and must be setup in Vault prior to deploying the helm chart
        # if `defaultAuthMethod.enabled=true`
        # @type: string
        role: "taskarr-role"

        serviceAccount: default