This repo provides scripts to generate PKI infrastructure for Kafka with CFSSL, and then run Kafka in Docker Compose with these certificates. There are three brokers, and one user certificate.
Generate the certificates:
./generate.shBring the cluster up:
docker-compose upProduce and consume:
docker-compose exec kafka-1 kafka-console-producer --broker-list localhost:19092 --topic ssl-topic --producer.config /etc/kafka/secrets/ssl.config
docker-compose exec kafka-1 kafka-console-consumer --bootstrap-server localhost:19092 --topic ssl-topic --consumer.config /etc/kafka/secrets/ssl.configTake the cluster down:
docker-compose down -vRemove all the certificates:
./clean.sh