-
Notifications
You must be signed in to change notification settings - Fork 5
/
Copy pathjob-ssl-client-auth.yaml
157 lines (157 loc) · 3.76 KB
/
job-ssl-client-auth.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
apiVersion: kafka.strimzi.io/v1beta1
kind: KafkaTopic
metadata:
name: kafka-test-apps-job
labels:
strimzi.io/cluster: my-cluster
spec:
partitions: 3
replicas: 3
config:
retention.bytes: 1073741824
retention.ms: 86400000
segment.bytes: 1073741824
---
apiVersion: kafka.strimzi.io/v1beta1
kind: KafkaUser
metadata:
name: kafka-test-apps-job-producer
labels:
strimzi.io/cluster: my-cluster
spec:
authentication:
type: tls
authorization:
type: simple
acls:
- resource:
type: topic
name: kafka-test-apps-job
operations: [ Write, Create, Describe ]
---
apiVersion: kafka.strimzi.io/v1beta1
kind: KafkaUser
metadata:
name: kafka-test-apps-job-consumer
labels:
strimzi.io/cluster: my-cluster
spec:
authentication:
type: tls
authorization:
type: simple
acls:
- resource:
type: topic
name: kafka-test-apps-job
operations: [ Read, Describe ]
- resource:
type: group
name: my-kafka-consumer-job
operations: [ Read ]
---
apiVersion: batch/v1
kind: Job
metadata:
labels:
app: kafka-producer-job
name: kafka-producer-job
spec:
parallelism: 1
completions: 1
backoffLimit: 5
template:
metadata:
labels:
app: kafka-producer-job
spec:
containers:
- name: kafka-producer-job
image: ghcr.io/scholzj/kafka-producer:latest
securityContext:
allowPrivilegeEscalation: false
capabilities:
drop:
- ALL
runAsNonRoot: true
seccompProfile:
type: RuntimeDefault
env:
- name: CA_CRT
valueFrom:
secretKeyRef:
name: my-cluster-cluster-ca-cert
key: ca.crt
- name: USER_CRT
valueFrom:
secretKeyRef:
name: kafka-test-apps-job-producer
key: user.crt
- name: USER_KEY
valueFrom:
secretKeyRef:
name: kafka-test-apps-job-producer
key: user.key
- name: BOOTSTRAP_SERVERS
value: my-cluster-kafka-bootstrap:9093
- name: TOPIC
value: kafka-test-apps-job
- name: TIMER
value: "20"
- name: NUMBER_OF_KEYS
value: "3"
- name: MESSAGE_COUNT
value: "1000000"
restartPolicy: OnFailure
---
apiVersion: batch/v1
kind: Job
metadata:
labels:
app: kafka-consumer-job
name: kafka-consumer-job
spec:
parallelism: 1
completions: 1
backoffLimit: 5
template:
metadata:
labels:
app: kafka-consumer-job
spec:
containers:
- name: kafka-consumer-job
image: ghcr.io/scholzj/kafka-consumer:latest
securityContext:
allowPrivilegeEscalation: false
capabilities:
drop:
- ALL
runAsNonRoot: true
seccompProfile:
type: RuntimeDefault
env:
- name: CA_CRT
valueFrom:
secretKeyRef:
name: my-cluster-cluster-ca-cert
key: ca.crt
- name: USER_CRT
valueFrom:
secretKeyRef:
name: kafka-test-apps-job-consumer
key: user.crt
- name: USER_KEY
valueFrom:
secretKeyRef:
name: kafka-test-apps-job-consumer
key: user.key
- name: BOOTSTRAP_SERVERS
value: my-cluster-kafka-bootstrap:9093
- name: TOPIC
value: kafka-test-apps-job
- name: GROUP_ID
value: my-kafka-consumer-job
- name: MESSAGE_COUNT
value: "1000000"
restartPolicy: OnFailure