{{- if .Values.vault }}
{{- if .Values.vault.auth }}
apiVersion: secrets.hashicorp.com/v1beta1
kind: VaultAuth
metadata:
  name: vault-auth
spec:
  method: kubernetes
  mount: {{ .Values.vault.auth.mount }}
  kubernetes:
    role: {{ .Values.vault.auth.role }}
    serviceAccount: default
    audiences:
      - vault
{{- end }}
{{- end }}