Skip to content
This repository was archived by the owner on Nov 16, 2023. It is now read-only.

Commit f79fb3d

Browse files
committed
Adding optional config for tls enabled loadbalancer. Refactoring test README
1 parent 721ab01 commit f79fb3d

File tree

4 files changed

+8
-10
lines changed

4 files changed

+8
-10
lines changed

config/tlsloadbalancer.yaml

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,5 @@
1+
config:
2+
subcomponents:
3+
kafka-cluster:
4+
config:
5+
externalLoadBalancerTls: true

helm-chart/kafka-cluster/templates/kafka-cluster.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -31,7 +31,7 @@ spec:
3131
listeners:
3232
external:
3333
type: loadbalancer
34-
tls: false # by default true
34+
tls: {{ .Values.externalLoadBalancerTls }}
3535
plain:
3636
networkPolicyPeers:
3737
- podSelector:

helm-chart/kafka-cluster/values.yaml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -2,4 +2,6 @@
22
# This is a YAML-formatted file.
33
# Declare variables to be passed into your templates.
44

5+
externalLoadBalancerTls: false
6+
57
kafkaLogDirs: /var/lib/kafka/data-0

test/README.md

Lines changed: 0 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -35,15 +35,6 @@ Run the testing script as configured below:
3535
The script will deploy a test topic and connect to the brokers through the external loadbalancer IP, utilizing kafkacat as a producer and consumer.
3636
The test results will displayed at the end. The script with exit with code 0 for success and 1 for failure.
3737

38-
## Liveness Check from Outside the cluster - with TLS enabled
39-
### Test Requirements
40-
- `kubectl` should be configured to point to this cluster
41-
- The Kafka deployment should be configured with an external loadbalancer listener.
42-
- [Reference Guide](https://strimzi.io/2019/05/13/accessing-kafka-part-4.html)
43-
- External LoadBalancer needs to have TLS enabled
44-
- `kafkacat` needs to be installed and added to $PATH
45-
- [Kafkacat Installation](https://github.com/edenhill/kafkacat#install)
46-
4738
# Replication
4839

4940
A sample configuration for mirror maker is included with the repo. Upload the destination cluster's certificate into a secret called `mirrormaker-cluster-ca-cert` in the `kafka` namespace, and add the IP address of the destination cluster's broker into `mirror-maker.yaml`. You will also need to create a KafkaUser for the second cluster in order to authenticate Mirror Maker with your cluster. To test out Mirror Maker, run ./test/mirror-maker.sh to set up clients within the Kafka namespace authenticated with mutual TLS authentication. You can then test out replication by using the kafkaclient pods:

0 commit comments

Comments
 (0)