datastax / pulsar-helm-chart

Apache Pulsar Helm chart

Apache License 2.0

47 stars 38 forks source link

Closed michaeljmarshall closed 2 years ago

michaeljmarshall commented 2 years ago

Motivation

By using a KeyStore to configure TLS for Pulsar components, we're able to support additional algorithms, like ECDSA.

Use the certconverter-configmap to generate the keystore (right now it is JKS, but it should be PKCS12 in a future iteration)
Set password environment variables
Set the relevant TLS configurations

michaeljmarshall commented 2 years ago

I tested this with both the examples/dev-values-tls-all-components.yaml and the examples/dev-values-tls.yaml files. Both deployed successfully.