From 8e92d2c3e7142e9ab5d78ec538021b9e716e3df5 Mon Sep 17 00:00:00 2001
From: Kyle Petryszak <6314611+ProjectInitiative@users.noreply.github.com>
Date: Mon, 5 Jan 2026 17:44:56 -0600
Subject: [PATCH] (feat): add conditional support for GitOps utilizing CRD
 spec.brokerK8sSecret

Signed-off-by: Kyle Petryszak <6314611+ProjectInitiative@users.noreply.github.com>
---
 submariner-operator/README.md                 | 1 +
 submariner-operator/templates/submariner.yaml | 4 ++++
 submariner-operator/values.yaml               | 1 +
 3 files changed, 6 insertions(+)

diff --git a/submariner-operator/README.md b/submariner-operator/README.md
index 6aff275..6f6d2ae 100644
--- a/submariner-operator/README.md
+++ b/submariner-operator/README.md
@@ -52,5 +52,6 @@ Submariner enables direct networking between Pods and Services in different Kube
 | submariner.images.tag | string | `"0.14.0"` |  |
 | submariner.natEnabled | bool | `false` |  |
 | submariner.serviceCidr | string | `""` |  |
+| submariner.brokerK8sSecret | string | `""` |  Name of the Kubernetes Secret containing broker credentials (ca.crt, token). |
 | submariner.serviceDiscovery | bool | `true` |  |
 | submariner.token | string | `""` |  |
diff --git a/submariner-operator/templates/submariner.yaml b/submariner-operator/templates/submariner.yaml
index 13cee60..09c58a7 100644
--- a/submariner-operator/templates/submariner.yaml
+++ b/submariner-operator/templates/submariner.yaml
@@ -6,8 +6,12 @@ metadata:
 spec:
   broker: k8s
   brokerK8sApiServer: {{ .Values.broker.server }}
+  {{- if .Values.submariner.brokerK8sSecret }}
+  brokerK8sSecret: {{ .Values.submariner.brokerK8sSecret }}
+  {{- else }}
   brokerK8sApiServerToken: {{ .Values.broker.token }}
   brokerK8sCA: {{ .Values.broker.ca }}
+  {{- end }}
   brokerK8sRemoteNamespace: {{ .Values.broker.namespace }}
   brokerK8sInsecure: {{ .Values.broker.insecure }}
   ceIPSecDebug: {{ .Values.ipsec.debug }}
diff --git a/submariner-operator/values.yaml b/submariner-operator/values.yaml
index 58ae2eb..c8544f2 100644
--- a/submariner-operator/values.yaml
+++ b/submariner-operator/values.yaml
@@ -7,6 +7,7 @@ submariner:
   globalCidr: ""
   clustersetIpCidr: ""
   clustersetIpEnabled: false
+  brokerK8sSecret: ""
   loadBalancerEnabled: false
   natEnabled: false
   colorCodes: blue