Skip to content

Commit

Permalink
Kafka RBAC changes for Prod env (#2971)
Browse files Browse the repository at this point in the history
* RBAC changes for Prod env

* Update application-prod.yaml
  • Loading branch information
Ponnia-M authored May 9, 2024
1 parent c958251 commit 6563652
Showing 1 changed file with 24 additions and 27 deletions.
51 changes: 24 additions & 27 deletions svc-bie-kafka/src/main/resources/application-prod.yaml
Original file line number Diff line number Diff line change
@@ -1,35 +1,32 @@
spring:
kafka:
bootstrap-servers: "${BIE_KAFKA_PLACEHOLDERS_BROKERS:kafka.prod.bip.va.gov:443}"
bootstrap-servers: "${BIE_KAFKA_PLACEHOLDERS_BROKERS:bip-kafka.prod.bip.va.gov:443}"
properties:
schema:
registry:
url: "${BIE_KAFKA_PLACEHOLDERS_BROKERS:https://schemaregistry.prod.bip.va.gov:443}"
ssl:
protocol: SSL
keystore:
type: PKCS12
location: "${KEYSTORE_FILE}"
password: "${BIE_KAFKA_KEYSTORE_PASSWORD}"
truststore:
type: PKCS12
location: "${TRUSTSTORE_FILE}"
password: "${BIE_KAFKA_TRUSTSTORE_PASSWORD}"
basic.auth.credentials.source: USER_INFO
basic.auth.user.info: "${BIE_KAFKA_RBAC_USERNAME}:${BIE_KAFKA_RBAC_PASSWORD}"
schema.registry:
basic.auth.credentials.source: USER_INFO
basic.auth.user.info: "${BIE_KAFKA_RBAC_USERNAME}:${BIE_KAFKA_RBAC_PASSWORD}"
url: "${BIE_KAFKA_PLACEHOLDERS_BROKERS:https://bip-schemaregistry.prod.bip.va.gov}"
ssl:
truststore.location: "${TRUSTSTORE_FILE}"
truststore.password: "${BIE_KAFKA_TRUSTSTORE_PASSWORD}"
truststore.type: "PKCS12"
security.protocol: SASL_SSL
sasl:
mechanism: PLAIN
jaas:
config: "org.apache.kafka.common.security.plain.PlainLoginModule required username=\"${BIE_KAFKA_RBAC_USERNAME}\" password=\"${BIE_KAFKA_RBAC_PASSWORD}\";"
consumer:
group-id: "${BIE_KAFKA_PLACEHOLDERS_GROUP_ID:vro-bie-prod-vro}"
group-id: "${BIE_KAFKA_PLACEHOLDERS_GROUP_ID:EXT_VRO_PROD}"
key-deserializer: "org.apache.kafka.common.serialization.StringDeserializer"
value-deserializer: "io.confluent.kafka.serializers.KafkaAvroDeserializer"
properties:
security.protocol: SSL
ssl:
keystore:
type: PKCS12
location: "${KEYSTORE_FILE}"
password: "${BIE_KAFKA_KEYSTORE_PASSWORD}"
truststore:
type: PKCS12
location: "${TRUSTSTORE_FILE}"
password: "${BIE_KAFKA_TRUSTSTORE_PASSWORD}"
security:
protocol: SASL_SSL
ssl:
trust-store-location: "file:${TRUSTSTORE_FILE}"
trust-store-password: "${BIE_KAFKA_TRUSTSTORE_PASSWORD}"
trust-store-type: "PKCS12"

bie:
kakfa-topic-prefix: "PROD_"
kafka-topic-infix: "PROD"

0 comments on commit 6563652

Please sign in to comment.