crossplane-contrib / provider-kafka

Crossplane provider for Kafka
Apache License 2.0
30 stars 32 forks source link

feat: add mtls support resolves #37 #40

Closed rtoma closed 2 years ago

rtoma commented 2 years ago

Description of your changes

My stab at adding mTLS support, re https://github.com/crossplane-contrib/provider-kafka/issues/37

Tested with AWS MSK, using this ProviderConfig credential Secret:

{
  "brokers": [
    "b-1.redacted.kafka.eu-central-1.amazonaws.com:9094",
    "b-2.redacted.kafka.eu-central-1.amazonaws.com:9094",
    "b-3.redacted.kafka.eu-central-1.amazonaws.com:9094"
  ],
  "tls": {
    "clientCertificateSecretRef": {
      "name": "my-client-cert",
      "namespace": "some-ns"
    }
  }
}

Where clientCertificateSecretRef references a TLS Secret by name and namespace. The Secret keys used match the TLS definition, as used by cert-manager.

I have:

How has this code been tested