Skip to content

Instantly share code, notes, and snippets.

@costa
Created February 6, 2019 14:33
Show Gist options
  • Save costa/6b44941570f6a2ac86f4bd576dbd4a86 to your computer and use it in GitHub Desktop.
Save costa/6b44941570f6a2ac86f4bd576dbd4a86 to your computer and use it in GitHub Desktop.
kafka rest proxy helm chart ssl disability workaround (a part of)
FROM confluentinc/cp-kafka-rest:5.0.1
# NOTE the `*store`s should not be source-controlled and should be password-protected,
# so upon the helm chart deployment, the values should include (along with image/Tag):
# cp-kafka-rest:
# configurationOverrides:
# ssl.keystore.password:
# ssl.truststore.password:
# ssl.key.password:
# the "*store"s should be password-protected and the passwords must be supplied upon deployment
ADD kafka.server.keystore.jks /var/private/ssl/
ENV KAFKA_REST_SSL_KEYSTORE_LOCATION=/var/private/ssl/kafka.server.keystore.jks
ADD kafka.client.truststore.jks /var/private/ssl/
ENV KAFKA_REST_SSL_TRUSTSTORE_LOCATION=/var/private/ssl/kafka.client.truststore.jks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment