...
Code Block | ||||
---|---|---|---|---|
| ||||
- port: 9010
nodePort: 30910
targetPort: 9010
name: kafka-bootstrap
protocol: TCP
- port: 9000
nodePort: 30900
targetPort: 9000
name: kafka-0
protocol: TCP
- port: 9001
nodePort: 30901
targetPort: 9001
name: kafka-1
protocol: TCP
- port: 9002
nodePort: 30902
targetPort: 9002
name: kafka-2
protocol: TCP |
...
Code Block | ||||
---|---|---|---|---|
| ||||
cd /opt/oom/kubernetes vi strimzi/templates/strimzi-kafka.yaml Update "tls" and "authentication.type" of the "external" kafka listener: --- - name: external port: 9094 type: nodeport tls: false authentication: type: {{ .Values.config.saslMechanism }} configuration: brokers: - broker: 0 advertisedHost: kafka-api.simpledemo.onap.org advertisedPort: 9000 - broker: 1 advertisedHost: kafka-api.simpledemo.onap.org advertisedPort: 9001 - broker: 2 advertisedHost: kafka-api.simpledemo.onap.org advertisedPort: 9002 |
- Apply the changes to onap-strimzi
Code Block | ||||
---|---|---|---|---|
| ||||
make strimzi helm upgrade -i onap-strimzi local/strimzi --namespace onap --version 12.0.0 --values /opt/oom/kubernetes/onap/values.yaml --values /opt/oom/kubernetes/onap/resources/overrides/onap-all-ingress-istio.yaml --values /opt/oom/kubernetes/onap/resources/overrides/environment.yaml --values /home/ubuntu/oom/master/onap-overrides.yaml --timeout '900s' |
...
Code Block | ||||||
---|---|---|---|---|---|---|
| ||||||
apiVersion: kafka.strimzi.io/v1beta2 kind: KafkaUser metadata: labels: argocd.argoproj.io/instance: external-strimzi-kafka-user strimzi.io/cluster: onap-strimzi name: external-strimzi-kafka-user namespace: onap spec: authentication: type: scram-sha-512 authorization: acls: - resource: type: topic name: unauthenticated.VES_PERF3GPP_OUTPUT patternType: literal operation: Write host: "*" - resource: type: topic name: unauthenticated.VES_PERF3GPP_OUTPUT patternType: literal operation: Describe host: "*" - resource: type: topic name: unauthenticated.VES_NOTIFICATION_OUTPUT patternType: literal operation: Write host: "*" - resource: type: topic name: unauthenticated.VES_NOTIFICATION_OUTPUT patternType: literal operation: Describe host: "*" - resource: type: topic name: unauthenticated.SEC_3GPP_HEARTBEAT_OUTPUT patternType: literal operation: Write host: "*" - resource: type: topic name: unauthenticated.SEC_3GPP_HEARTBEAT_OUTPUT patternType: literal operation: Describe host: "*" - resource: type: topic name: unauthenticated.VES_MEASUREMENT_OUTPUT patternType: literal operation: Write host: "*" - resource: type: topic name: unauthenticated.VES_MEASUREMENT_OUTPUT patternType: literal operation: Describe host: "*" type: simple |
- Apply tlskafka-user.yaml
Code Block | ||||||
---|---|---|---|---|---|---|
| ||||||
kubectl apply -f kafka-user.yaml |
...