Przeglądaj źródła

add doc for ssl

Narekmat 2 lat temu
rodzic
commit
7bb6dc479a
1 zmienionych plików z 62 dodań i 0 usunięć
  1. 62 0
      configuration/kafka-ui-ssl.md

+ 62 - 0
configuration/kafka-ui-ssl.md

@@ -0,0 +1,62 @@
+# Implement ssl for kafka-ui
+To implemet ssl for kafka-ui you need to provide jks files to pod. Here is the instruction how to that.
+## Create config map with conntent from kafka.truststore.jks and kafka.keystore.jks.
+Create configmap.yaml file with following content.
+```
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: ssl-files
+  # Specify namespace if needed, uncomment next line and provide namespace
+  #namespace:  {namespace}
+data:
+  kafka.truststore.jks: |
+    ## content of kafka.truststore.jks
+  kafka.keystore.jks: |
+    ## content of kafka.keystore.jks
+ ```
+## Create secret.
+Encode secret with base64(You can use this tool https://www.base64encode.org/). Create secret.yaml file with following content
+ ```
+apiVersion: v1
+kind: Secret
+metadata:
+  name: ssl-secret
+  # Specify namespace if needed, uncomment next line and provide namespace
+  #namespace: {namespace}
+type: Opaque
+data:
+  KAFKA_CLUSTERS_0_PROPERTIES_SSL_TRUSTSTORE_PASSWORD: ##Base 64 encoded secret
+  KAFKA_CLUSTERS_0_PROPERTIES_SSL_KEYSTORE_PASSWORD: ##Base 64 encoded secret
+ ```
+ ## Create ssl-values.yaml file with following content.
+```
+existingSecret: "ssl-files"
+
+
+env:
+- name:  KAFKA_CLUSTERS_0_PROPERTIES_SSL_TRUSTSTORE_LOCATION 
+  value:  /ssl/kafka.truststore.jks
+- name: KAFKA_CLUSTERS_0_PROPERTIES_SSL_KEYSTORE_LOCATION
+  value: /ssl/kafka.keystore.jks
+
+
+volumeMounts:
+ - name: config-volume
+   mountPath: /ssl
+
+volumes:
+ - name: config-volume
+   configMap:
+     name: ssl-files
+```
+
+## Install chart with command
+```
+helm install kafka-ui kafka-ui/kafka-ui -f ssl-values.yaml
+```
+If you have specified namespace for configmap and secret please use this command
+
+```
+helm install kafka-ui kafka-ui/kafka-ui -f ssl-values.yaml -n {namespace}
+```