{{- if .Values.vault.enabled -}}
apiVersion: secrets.hashicorp.com/v1beta1
kind: VaultAuth
metadata:
  name: auth
  namespace: {{ .Release.Namespace }}
  labels:
    {{- include "telegram-gateway.labels" . | nindent 4 }}
spec:
  method: kubernetes
  mount: kubernetes
  kubernetes:
    role: {{ .Values.vault.role }}
    serviceAccount: {{ include "telegram-gateway.serviceAccountName" . }}
    audiences:
      - vault
{{- end }}