lbroudoux

On Mac M1

Go to a temporary folder and remove previously downloaded latest images:

$ cd ~/Development/temp
$ docker rmi quay.io/microcks/microcks:latest

Clone a fresh copy of Microcks Git repository:

lbroudoux

# We need to add all build-args for native here. It does seem to work when in pom.xml
quarkus.native.additional-build-args=\
  -H:ReflectionConfigurationFiles=reflection-config.json,\
  --initialize-at-run-time=org.bouncycastle.jcajce.provider.drbg.DRBG\\$NonceAndIV\\,org.bouncycastle.jcajce.provider.drbg.DRBG\\$Default

lbroudoux

[...]

import io.fabric8.kubernetes.api.model.Secret;
import io.fabric8.kubernetes.api.model.SecretBuilder;
import org.bouncycastle.asn1.ASN1Encodable;
import org.bouncycastle.asn1.DERSequence;
import org.bouncycastle.asn1.pkcs.PrivateKeyInfo;
import org.bouncycastle.asn1.x509.BasicConstraints;
import org.bouncycastle.asn1.x509.ExtendedKeyUsage;
import org.bouncycastle.asn1.x509.Extension;

lbroudoux

# Kafka configuration properties for TLS authentication and TLS transport.
kafka.bootstrap.servers=mtls-cluster-kafka-bootstrap-kafka-test.apps.kubernetes.acme.com:443
kafka.ssl.truststore.location=/Users/lbroudou/Development/kafka-test/mtls-cluster-ca.p12
kafka.ssl.truststore.password=sHgN5VLVJCzU
kafka.ssl.truststore.type=PKCS12
kafka.ssl.keystore.location=/Users/lbroudou/Development/kafka-test/mtls-user.p12
kafka.ssl.keystore.password=timpMsibd2rl
kafka.ssl.keystore.type=PKCS12
kafka.security.protocol=SSL

lbroudoux

# Kafka configuration properties for TLS authentication and TLS transport.
spring.kafka.producer.bootstrap-servers=mtls-cluster-kafka-bootstrap-kafka-test.apps.kubernetes.acme.com:443
spring.kafka.producer.properties.ssl.truststore.location=/Users/lbroudou/Development/kafka-test/mtls-cluster-ca.p12
spring.kafka.producer.properties.ssl.truststore.password=sHgN5VLVJCzU
spring.kafka.producer.properties.ssl.truststore.type=PKCS12
spring.kafka.producer.properties.ssl.keystore.location=/Users/lbroudou/Development/kafka-test/mtls-user.p12
spring.kafka.producer.properties.ssl.keystore.password=timpMsibd2rl
spring.kafka.producer.properties.ssl.keystore.type=PKCS12
spring.kafka.producer.properties.security.protocol=SSL

lbroudoux

# Kafka configuration properties for SCRAM-SHA-512 authentication and TLS transport.
kafka.bootstrap.servers=scram-cluster-kafka-bootstrap-kafka-test.apps.kubernetes.acme.com:443
kafka.ssl.truststore.location=/Users/lbroudou/Development/kafka-test/scram-cluster-ca.p12
kafka.ssl.truststore.password=LoUk0HtOd8tD
kafka.ssl.truststore.type=PKCS12
kafka.security.protocol=SASL_SSL
kafka.sasl.mechanism=SCRAM-SHA-512
kafka.sasl.jaas.config=org.apache.kafka.common.security.scram.ScramLoginModule required username="scram-user" password="tDtDCT3pYKE5";

mp.messaging.incoming.microcks-services-updates.bootstrap.servers=scram-cluster-kafka-bootstrap-kafka-test.apps.kubernetes.acme.com:443

lbroudoux

# Kafka configuration properties for SCRAM-SHA-512 authentication and TLS transport.
spring.kafka.producer.bootstrap-servers=scram-cluster-kafka-bootstrap-kafka-test.apps.kubernetes.domain.com:443
spring.kafka.producer.properties.ssl.truststore.location=/Users/lbroudou/Development/kafka-test/scram-cluster-ca.p12
spring.kafka.producer.properties.ssl.truststore.password=LoUk0HtOd8tD
spring.kafka.producer.properties.ssl.truststore.type=PKCS12
spring.kafka.producer.properties.security.protocol=SASL_SSL
spring.kafka.producer.properties.sasl.mechanism=SCRAM-SHA-512
spring.kafka.producer.properties.sasl.jaas.config=org.apache.kafka.common.security.scram.ScramLoginModule required username="scram-user" password="tDtDCT3pYKE5";

lbroudoux

apiVersion: kafka.strimzi.io/v1beta2
kind: KafkaUser
metadata:
  name: mtls-user
  labels:
    strimzi.io/cluster: mtls-cluster
spec:
  authentication:
    type: tls

lbroudoux

apiVersion: kafka.strimzi.io/v1beta2
kind: KafkaUser
metadata:
  name: scram-user
  labels:
    strimzi.io/cluster: scram-cluster
spec:
  authentication:
    type: scram-sha-512

lbroudoux

apiVersion: kafka.strimzi.io/v1beta2
kind: Kafka
metadata:
  name: mtls-cluster
spec:
  entityOperator:
    topicOperator: {}
    userOperator: {}
  kafka:
    config: