push opa connect string calc down to function

Author: adwk67

rust/operator-binary/src/controller.rs

@@ -263,11 +263,6 @@ pub async fn reconcile_kafka(
         validate::validate(kafka, dereferenced_objects, &ctx.operator_environment)
             .context(ValidateClusterSnafu)?;
 
-    let opa_connect = validated_cluster
-        .authorization_config
-        .as_ref()
-        .map(|auth_config| auth_config.opa_connect.clone());
-
     let mut cluster_resources = ClusterResources::new(
         APP_NAME,
         OPERATOR_NAME,
@@ -347,7 +342,6 @@ pub async fn reconcile_kafka(
                 validated_rg,
                 &kafka_listeners,
                 &pod_descriptors,
-                opa_connect.as_deref(),
             )
             .context(BuildConfigMapSnafu)?;
 

rust/operator-binary/src/controller/build/config_map.rs

@@ -76,13 +76,17 @@ pub fn build_rolegroup_config_map(
     validated_rg: &ValidatedRoleGroupConfig,
     listener_config: &KafkaListenerConfig,
     pod_descriptors: &[KafkaPodDescriptor],
-    opa_connect_string: Option<&str>,
 ) -> Result<ConfigMap, Error> {
     let kafka_security = &validated_cluster.kafka_security;
     let resolved_product_image = &validated_cluster.image;
     let kafka_config_file_name = validated_rg.merged_config.config_file_name();
     let config_overrides = validated_rg.config_file_overrides.clone();
 
+    let opa_connect = validated_cluster
+        .authorization_config
+        .as_ref()
+        .map(|auth_config| auth_config.opa_connect.clone());
+
     let metadata_manager = kafka
         .effective_metadata_manager()
         .context(InvalidMetadataManagerSnafu)?;
@@ -92,7 +96,7 @@ pub fn build_rolegroup_config_map(
             kafka_security,
             listener_config,
             pod_descriptors,
-            opa_connect_string,
+            opa_connect.as_deref(),
             metadata_manager == MetadataManager::KRaft,
             kafka
                 .spec