To expose Kafka port externally enable SSL/TLS configuration in Kafka.
- Build the image based on this Dockerfile
- Generate all keys and certificates based on gen.sh. Note Replace
<YOUR_KAFKA_DOMAIN_HERE>
and passphrase (i.e. test1234). - Create a secret based to store all certificates:
oc create secret generic kafka-ssl --from-file=/absolute/path/to/generated/certs/dir
- Update Kafka's Statefulset to enable SSL (statefulset.yml holds already patched version of our template):