-
Notifications
You must be signed in to change notification settings - Fork 28
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
In KRaft mode Zookeper is not used, since brokers communicate to each other directly.
- Loading branch information
Showing
9 changed files
with
275 additions
and
149 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
152 changes: 152 additions & 0 deletions
152
quarkus-test-service-kafka/src/main/resources/strimzi-default-server-sasl-ssl.properties
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,152 @@ | ||
# Licensed to the Apache Software Foundation (ASF) under one or more | ||
# contributor license agreements. See the NOTICE file distributed with | ||
# this work for additional information regarding copyright ownership. | ||
# The ASF licenses this file to You under the Apache License, Version 2.0 | ||
# (the "License"); you may not use this file except in compliance with | ||
# the License. You may obtain a copy of the License at | ||
# | ||
# http://www.apache.org/licenses/LICENSE-2.0 | ||
# | ||
# Unless required by applicable law or agreed to in writing, software | ||
# distributed under the License is distributed on an "AS IS" BASIS, | ||
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. | ||
# See the License for the specific language governing permissions and | ||
# limitations under the License. | ||
|
||
# see kafka.server.KafkaConfig for additional details and defaults | ||
|
||
############################# Server Basics ############################# | ||
|
||
# The role of this server. Setting this puts us in KRaft mode | ||
process.roles=broker,controller | ||
|
||
# The node id associated with this instance's roles | ||
node.id=1 | ||
|
||
# The connect string for the controller quorum | ||
controller.quorum.voters=1@localhost:9094 | ||
|
||
############################# Socket Server Settings ############################# | ||
|
||
# The address the socket server listens on. It will get the value returned from | ||
# java.net.InetAddress.getCanonicalHostName() if not configured. | ||
# FORMAT: | ||
# listeners = listener_name://host_name:port | ||
# EXAMPLE: | ||
# listeners = PLAINTEXT://your.host.name:9092 | ||
#listeners=PLAINTEXT://:9092 | ||
listeners=BROKER://0.0.0.0:9093,SASL_SSL://0.0.0.0:9092,CONTROLLER://0.0.0.0:9094 | ||
|
||
# Name of listener used for communication between brokers. | ||
inter.broker.listener.name=BROKER | ||
|
||
# Hostname and port the broker will advertise to producers and consumers. If not set, | ||
# it uses the value for "listeners" if configured. Otherwise, it will use the value | ||
# returned from java.net.InetAddress.getCanonicalHostName(). | ||
#advertised.listeners=PLAINTEXT://your.host.name:9092 | ||
advertised.listeners=SASL_SSL://localhost:${KAFKA_MAPPED_PORT},BROKER://localhost:9093 | ||
|
||
# A comma-separated list of the names of the listeners used by the controller. | ||
# If no explicit mapping set in `listener.security.protocol.map`, default will be using PLAINTEXT protocol | ||
# This is required if running in KRaft mode. | ||
controller.listener.names=CONTROLLER | ||
|
||
# Maps listener names to security protocols, the default is for them to be the same. See the config documentation for more details | ||
#listener.security.protocol.map=PLAINTEXT:PLAINTEXT,SSL:SSL,SASL_PLAINTEXT:SASL_PLAINTEXT,SASL_SSL:SASL_SSL | ||
listener.security.protocol.map=BROKER:PLAINTEXT,SASL_SSL:SASL_SSL,CONTROLLER:PLAINTEXT | ||
|
||
# The number of threads that the server uses for receiving requests from the network and sending responses to the network | ||
num.network.threads=3 | ||
|
||
# The number of threads that the server uses for processing requests, which may include disk I/O | ||
num.io.threads=8 | ||
|
||
# The send buffer (SO_SNDBUF) used by the socket server | ||
socket.send.buffer.bytes=102400 | ||
|
||
# The receive buffer (SO_RCVBUF) used by the socket server | ||
socket.receive.buffer.bytes=102400 | ||
|
||
# The maximum size of a request that the socket server will accept (protection against OOM) | ||
socket.request.max.bytes=104857600 | ||
|
||
############################# SASL_SSL Settings ############################# | ||
|
||
sasl.enabled.mechanisms=SCRAM-SHA-512 | ||
sasl.mechanism.inter.broker.protocol=SCRAM-SHA-512 | ||
|
||
# Password must have at least 32 characters to work in FIPS-enabled environment | ||
# see https://strimzi.io/blog/2023/01/25/running-apache-kafka-on-fips-enabled-kubernetes-cluster/ | ||
listener.name.sasl_ssl.scram-sha-512.sasl.jaas.config=org.apache.kafka.common.security.scram.ScramLoginModule required username="client" password="client-secret12345678912345678912"; | ||
|
||
############################# SSL ############################# | ||
|
||
ssl.keystore.location=/opt/kafka/config/strimzi-server-ssl-keystore.p12 | ||
ssl.keystore.password=top-secret | ||
ssl.keystore.type=PKCS12 | ||
ssl.key.password=top-secret | ||
ssl.truststore.location=/opt/kafka/config/strimzi-server-ssl-truststore.p12 | ||
ssl.truststore.password=top-secret | ||
ssl.truststore.type=PKCS12 | ||
ssl.endpoint.identification.algorithm=https | ||
ssl.client.auth=required | ||
|
||
|
||
############################# Log Basics ############################# | ||
|
||
# A comma separated list of directories under which to store log files | ||
log.dirs=/tmp/kraft-combined-logs | ||
|
||
# The default number of log partitions per topic. More partitions allow greater | ||
# parallelism for consumption, but this will also result in more files across | ||
# the brokers. | ||
num.partitions=1 | ||
|
||
# The number of threads per data directory to be used for log recovery at startup and flushing at shutdown. | ||
# This value is recommended to be increased for installations with data dirs located in RAID array. | ||
num.recovery.threads.per.data.dir=1 | ||
|
||
############################# Internal Topic Settings ############################# | ||
# The replication factor for the group metadata internal topics "__consumer_offsets" and "__transaction_state" | ||
# For anything other than development testing, a value greater than 1 is recommended to ensure availability such as 3. | ||
offsets.topic.replication.factor=1 | ||
transaction.state.log.replication.factor=1 | ||
transaction.state.log.min.isr=1 | ||
|
||
############################# Log Flush Policy ############################# | ||
|
||
# Messages are immediately written to the filesystem but by default we only fsync() to sync | ||
# the OS cache lazily. The following configurations control the flush of data to disk. | ||
# There are a few important trade-offs here: | ||
# 1. Durability: Unflushed data may be lost if you are not using replication. | ||
# 2. Latency: Very large flush intervals may lead to latency spikes when the flush does occur as there will be a lot of data to flush. | ||
# 3. Throughput: The flush is generally the most expensive operation, and a small flush interval may lead to excessive seeks. | ||
# The settings below allow one to configure the flush policy to flush data after a period of time or | ||
# every N messages (or both). This can be done globally and overridden on a per-topic basis. | ||
|
||
# The number of messages to accept before forcing a flush of data to disk | ||
#log.flush.interval.messages=10000 | ||
|
||
# The maximum amount of time a message can sit in a log before we force a flush | ||
#log.flush.interval.ms=1000 | ||
|
||
############################# Log Retention Policy ############################# | ||
|
||
# The following configurations control the disposal of log segments. The policy can | ||
# be set to delete segments after a period of time, or after a given size has accumulated. | ||
# A segment will be deleted whenever *either* of these criteria are met. Deletion always happens | ||
# from the end of the log. | ||
|
||
# The minimum age of a log file to be eligible for deletion due to age | ||
log.retention.hours=168 | ||
|
||
# A size-based retention policy for logs. Segments are pruned from the log unless the remaining | ||
# segments drop below log.retention.bytes. Functions independently of log.retention.hours. | ||
#log.retention.bytes=1073741824 | ||
|
||
# The maximum size of a log segment file. When this size is reached a new log segment will be created. | ||
log.segment.bytes=1073741824 | ||
|
||
# The interval at which log segments are checked to see if they can be deleted according | ||
# to the retention policies | ||
log.retention.check.interval.ms=300000 |
Oops, something went wrong.