kakfa开启sasl认证

kafka版本：3.7.0
chart信息： https://github.com/bitnami/charts/tree/main/bitnami/kafka
version: 28.0.4

修改配置

values涉及sasl的相关配置如下

listeners:
  client:
    containerPort: 9092
    protocol: SASL_PLAINTEXT
    name: CLIENT
    sslClientAuth: ""
  controller:
    name: CONTROLLER
    containerPort: 9093
    protocol: PLAINTEXT
    sslClientAuth: ""
  interbroker:
    containerPort: 9094
    protocol: PLAINTEXT
    name: INTERNAL
    sslClientAuth: ""
  external:
    containerPort: 9095
    protocol: SASL_PLAINTEXT
    name: EXTERNAL
    sslClientAuth: ""
  extraListeners: []
  overrideListeners: ""
  advertisedListeners: ""
  securityProtocolMap: ""
sasl:
  enabledMechanisms: PLAIN,SCRAM-SHA-256,SCRAM-SHA-512 
  interBrokerMechanism: PLAIN
  controllerMechanism: PLAIN
#  oauthbearer:
#    tokenEndpointUrl: ""
#    jwksEndpointUrl: ""
#    expectedAudience: ""
#    subClaimName: "sub"
#  interbroker:
#    user: inter_broker_user
#    password: "B5e%VcaEE4HU^5QAz5ts"
#    clientId: inter_broker_client
#    clientSecret: ""
#  controller:
#    user: controller_user
#    password: "*^nG6uVH&VuXcq4JskcY"
#    clientId: controller_broker_client
#    clientSecret: ""
  client:
    users:
      - admin
    passwords: "7t^J8yHFBN74ZC2qwJEn"
  zookeeper:
    user: ""
    password: ""
  existingSecret: ""

安装kafka

如果之前已经部署kafka，需要先卸载，并且删除pvc数据

helm install gitee-kafka  gitee-prod/kafka --version 28.0.4 -f gitee-kafka.yaml -n <namespace>

验证

根据helm安装后的提示信息进行验证

新建连接配置文件 client.properties

cat /tmp/client.properties 
security.protocol=SASL_PLAINTEXT
sasl.mechanism=SCRAM-SHA-512
sasl.jaas.config=org.apache.kafka.common.security.scram.ScramLoginModule required username="admin" password="7t^J8yHFBN74ZCAAASAn";

拷贝连接文件并进入client容器

kubectl cp --namespace <命名空间> /path/to/client.properties gitee-kafka-client:/tmp/client.properties
kubectl exec --tty -i gitee-kafka-client --namespace <命名空间> -- bash

• 创建Topic

kafka-topics.sh --partitions 10 --replication-factor 1 --bootstrap-server <kafka地址>:9092  --topic test111 --create --command-config /tmp/client.properties 
 Created topic test111.

• 查看Topic

kafka-topics.sh --bootstrap-server <kafka地址>:9092 --list --command-config /tmp/client.properties