diff --git a/charts/hub-credentials/Chart.yaml b/charts/hub-credentials/Chart.yaml
index 8a29a6a..7b3fefa 100644
--- a/charts/hub-credentials/Chart.yaml
+++ b/charts/hub-credentials/Chart.yaml
@@ -18,7 +18,7 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 0.1.0
+version: 0.2.0
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to
diff --git a/charts/hub-credentials/templates/environment.yaml b/charts/hub-credentials/templates/environment.yaml
index 0d79147..ca1f59a 100644
--- a/charts/hub-credentials/templates/environment.yaml
+++ b/charts/hub-credentials/templates/environment.yaml
@@ -7,4 +7,9 @@ data:
   ORY_ADMIN_BASE_URL: {{ .oryAdminBaseUrl }}
   ORY_PUBLIC_BASE_URL: {{ .oryPublicBaseUrl }}
   PORT: {{ .port | quote }}
+  KAFKA_BROKERS: {{ .kafkaBrokers | quote }}
+  {{- if .kafkaSsl }}
+  KAFKA_USERNAME: {{ required "must set kafka username" .kafkaUsername | quote }}
+  KAFKA_SSL: "true"
+  {{- end }}
   {{- end }}
diff --git a/charts/hub-credentials/templates/secrets.yaml b/charts/hub-credentials/templates/secrets.yaml
index 10c464b..6b9c910 100644
--- a/charts/hub-credentials/templates/secrets.yaml
+++ b/charts/hub-credentials/templates/secrets.yaml
@@ -9,5 +9,6 @@ metadata:
 type: Opaque
 data:
   ORY_AUTH_TOKEN: {{ .entries.oryAuthToken | b64enc }}
+  KAFKA_PASSWORD: {{ required "must set kafka password" .entries.kafkaPassword | b64enc }}
 {{- end }}
 {{- end }}
\ No newline at end of file
diff --git a/charts/hub-credentials/values.yaml b/charts/hub-credentials/values.yaml
index b4cbee9..bd476ec 100644
--- a/charts/hub-credentials/values.yaml
+++ b/charts/hub-credentials/values.yaml
@@ -25,10 +25,12 @@ serviceAccount:
 
 podAnnotations: {}
 
-podSecurityContext: {}
+podSecurityContext:
+  {}
   # fsGroup: 2000
 
-securityContext: {}
+securityContext:
+  {}
   # capabilities:
   #   drop:
   #   - ALL
@@ -40,7 +42,8 @@ service:
   type: ClusterIP
   port: 80
 
-resources: {}
+resources:
+  {}
   # We usually recommend not to specify default resources and to leave this as a conscious
   # choice for the user. This also increases chances charts run on environments with little
   # resources, such as Minikube. If you do want to specify resources, uncomment the following
@@ -69,8 +72,12 @@ secrets:
   enabled: true
   entries:
     oryAuthToken: ""
+    kafkaPassword:
 
 environment:
   port: "80"
+  kafkaBrokers: "hub-eventbus-cluster-0.hub-eventbus-cluster.default.svc.cluster.local.:9093"
+  kafkaSsl: false
+  kafkaUsername: ""
   oryAdminBaseUrl: "http://hydra-admin:4445"
   oryPublicBaseUrl: "http://hydra-public:4444"