ssl - 带 SSL 的 Kubernetes 上的 Kafka

Question

我有一个在 K8S 上运行的 Kafka 集群。我正在使用汇合的 kafka 图像，并且我有一个正在工作的 EXTERNAL 监听器。如何添加 SSL 加密？我应该使用入口吗？我在哪里可以找到好的文档？谢谢

Answer 1

你有一个 manual way in this gist , 它不使用合流图像。

但对于 Confluent and its Helm chart (参见 Confluent Operator: Getting Started with Apache Kafka and Kubernetes 中的“Rohit Bakhshi ”)，您可以关注:

"Encryption, authentication and external access for Confluent Kafka on Kubernetes "来自 Ryan Morris

Out of the box, the helm chart doesn’t support SSL configurations for encryption and authentication, or exposing the platform for access from outside the Kubernetes cluster.

To implement these requirements, there are a few modifications to the installation needed.
In summary, they are:

• Generate some private keys/certificates for brokers and clients
• Create Kubernetes Secrets to provide them within your cluster
• Update the broker StatefulSet with your Secrets and SSL configuration
• Expose each broker pod via an external service