Skip to content
This repository has been archived by the owner on Dec 15, 2021. It is now read-only.

Update use-existing-kafka.md #1056

Merged
merged 2 commits into from
Jul 2, 2019

Conversation

gemanilkashyap
Copy link
Contributor

@gemanilkashyap gemanilkashyap commented Jul 1, 2019

Adding an example configuration for SSL based connectivity for Kafka Triggers

Issue Ref: [Issue number related to this PR or None]

Description:

[PR Description]

TODOs:

  • Ready to review
  • Automated Tests
  • Docs

Adding an example configuration for SSL based connectivity for Kafka Triggers
Copy link
Contributor

@andresmgot andresmgot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for adding the example! I have a few suggestions

@@ -171,3 +171,38 @@ When using SSL to secure kafka communication, you must set `KAFKA_ENABLE_TLS`, a
* `KAFKA_CACERTS` to check server certificate
* `KAFKA_CERT` and `KAFKA_KEY` to check client certificate
* `KAFKA_INSECURE` to skip TLS verfication
```yaml
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

would you mind adding some paragraph before doing what you are setting here? Something like "Below you can find an example of a Kafka controller deployment using TLS"

@@ -171,3 +171,38 @@ When using SSL to secure kafka communication, you must set `KAFKA_ENABLE_TLS`, a
* `KAFKA_CACERTS` to check server certificate
* `KAFKA_CERT` and `KAFKA_KEY` to check client certificate
* `KAFKA_INSECURE` to skip TLS verfication
```yaml
$ echo '
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think you can remove the $echo ' part (I know it's like that in the other example but it's not clarifying anything

env:
...
- name: KAFKA_ENABLE_TLS
value: "true" # CHANGE THIS!
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

If you are using TLS this should be "true" right? Why are you setting the comment CHANGE THIS?

value: "/path/to/cert.pem" # CHANGE THIS! (MAKE SURE PATH ARE VOLUME MOUNTED SAY FROM SECRETS)
- name: KAFKA_KEY
value: "/path/to/key.pem" # CHANGE THIS! (MAKE SURE PATH ARE VOLUME MOUNTED SAY FROM SECRETS)
...
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Would you mind adding the volumeMounts and volumes section? So people know these files come from a Secret.

Copy link
Contributor

@andresmgot andresmgot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for the update!

@andresmgot andresmgot merged commit e668da7 into vmware-archive:master Jul 2, 2019
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants