slavirok

kafkacat -b broker.aivencloud.com:17189 \
  -X security.protocol=SSL -X ssl.key.location=/path_to/service.key  \
  -X ssl.certificate.location=/path_to/service.cert \
  -X ssl.ca.location=/path_to/ca.pem -L \
  -t test-test-topic -C -f '\nTimestamp: %T Partition: %p  Offset: %o Headers: %h\n'

slavirok

input:
  kafka:
    addresses:
      - ${EVENTHUB_BOOTSTRAP_SERVER}
    topics: [${EVENTHUB_TOPIC}]
    tls:
      enabled: true
      skip_cert_verify: true
      root_cas_file: ""
      client_certs: []

slavirok

docker stop $(docker ps -a -q)
docker rm $(docker ps -a -q)
---------------------------------------
version: '2'
services:

  zookeeper:
    image: confluentinc/cp-zookeeper:5.0.0
    ports:
      - "2181:2181"

slavirok

apiVersion: apps/v1beta1
kind: Deployment
metadata:
  name: ksql
  labels:
    app: ksql
spec:
  replicas: 2
  template:
    metadata:

slavirok

kubectl create secret generic ksql-certs  \
  --from-file=./certs/client.keystore.p12 \
  --from-file=./certs/client.truststore.jks \
  --from-file=./certs//schema_registry.truststore.jks

kubectl create secret generic ksql-secrets \
   --from-literal=certpass=password \
   --from-literal=schema_registry_credentials="avnadmin:pass"

kubectl create configmap ksql-config-map \

slavirok

openssl pkcs12 -export -inkey service.key -in service.cert -out client.keystore.p12 -name service_key

keytool -import -file ca.pem -alias CA -keystore client.truststore.jks

keytool -import -file ./ca_schema_registry.cert -alias CA -keystore  ./schema_registry.truststore.jks

slavirok

 openssl s_client -connect schemaregistry_url.aivencloud.com:17192 -showcerts < /dev/null 2>/dev/null |
    awk '/BEGIN CERT/{s=1}; s{t=t "\n" $0};
    /END CERT/ {last=t; t=""; s=0}; END{print last}' > ./ca_schema_registry.cert

slavirok

### Keybase proof

I hereby claim:

  * I am slavirok on github.
  * I am rokas (https://keybase.io/rokas) on keybase.
  * I have a public key ASAvDgEG3Bx1jvU1AxA7RCuF4-lwfhN9doY5jS5dPb40Xwo

To claim this, I am signing this object: