Skip to content

Commit

Permalink
update vault and tls wording and env var config
Browse files Browse the repository at this point in the history
  • Loading branch information
vordimous committed Oct 24, 2023
1 parent c687f49 commit 04bab34
Show file tree
Hide file tree
Showing 2 changed files with 13 additions and 7 deletions.
6 changes: 3 additions & 3 deletions src/concepts/config-intro.md
Original file line number Diff line number Diff line change
Expand Up @@ -108,11 +108,11 @@ Using a [filesystem](../reference/config/vaults/vault-filesystem.md) vault, you

```yaml{6}
vaults:
your_server_certificate:
your_servers:
type: filesystem
options:
keys:
store: your_server.p12
store: your_servers.p12
type: pkcs12
password: ${{env.KEYSTORE_PASSWORD}}
```
Expand All @@ -139,7 +139,7 @@ bindings:
tls_server:
type: tls
kind: server
vault: your_server_certificate
vault: your_servers
options:
keys:
- your_server.com
Expand Down
14 changes: 10 additions & 4 deletions src/how-tos/mqtt/mqtt.kafka.broker.md
Original file line number Diff line number Diff line change
Expand Up @@ -105,6 +105,7 @@ export KAFKA_PORT=29092
Create these topics in the Kafka environment.

```bash:no-line-numbers
\
/bin/kafka-topics.sh --bootstrap-server $KAFKA_HOST:$KAFKA_PORT --create --if-not-exists --topic mqtt-sessions
/bin/kafka-topics.sh --bootstrap-server $KAFKA_HOST:$KAFKA_PORT --create --if-not-exists --topic mqtt-messages --config cleanup.policy=compact
/bin/kafka-topics.sh --bootstrap-server $KAFKA_HOST:$KAFKA_PORT --create --if-not-exists --topic mqtt-retained --config cleanup.policy=compact
Expand Down Expand Up @@ -184,17 +185,22 @@ With your `zilla.yaml` config, follow the [Zilla install instructions](../instal
--env KAFKA_HOST="$KAFKA_HOST" --env KAFKA_PORT="$KAFKA_PORT"
```

@tab Helm
@tab Helm values.yaml

```bash:no-line-numbers
--set extraEnv[1].value="$KAFKA_HOST",extraEnv [2].value="$KAFKA_PORT" \
```yaml:no-line-numbers
# use the values from $KAFKA_HOST $KAFKA_PORT variables
extraEnv:
- name: KAFKA_HOST
value: "host.docker.internal"
- name: KAFKA_PORT
value: "29092"
```

:::

### Adding TLS

You can add TLS to to this broker by adding a vault and tls binding described in the [Server Encryption](../../concepts/config-intro.html#server-encryption-tls-ssl) section. The main difference other than the port numbers is the [mqtt server](../../reference/config/bindings/binding-mqtt.md) binding doesn't require and [alpn](../reference/config/bindings/binding-tls.md#options-alpn) option.
You can add TLS to this broker by adding a vault and tls binding as described in the [Server Encryption](../../concepts/config-intro.md#server-encryption-tls-ssl) section. Besides the port numbers, the difference regarding an MQTT broker is that you don't need to add the [alpn](../reference/config/bindings/binding-tls.md#options-alpn) option to the [tls](../reference/config/bindings/binding-tls.md) binding.

## Remove the running containers

Expand Down

0 comments on commit 04bab34

Please sign in to comment.