【发布时间】:2021-12-13 12:53:00
【问题描述】:
我正在尝试按照以下指南使用 Strimzi 提供对 Kafka 的双向外部访问:Red Hat Developer - Kafka in Kubernetes
我的YAML取自Strimizi examples on GitHub,如下:
apiVersion: kafka.strimzi.io/v1beta2
kind: Kafka
metadata:
name: my-cluster
spec:
kafka:
version: 3.0.0
replicas: 1 #3
listeners:
- name: plain
port: 9092
type: internal
tls: false
- name: tls
port: 9093
type: internal
tls: true
- name: external
port: 9094
type: loadbalancer
tls: false
configuration:
#externalTrafficPolicy: Local
#loadBalancerSourceRanges:
# - 10.0.0.200/32
brokers:
- broker: 0
advertisedHost: 10.0.0.200
advertisedPort: 30123
config:
offsets.topic.replication.factor: 1 #3
transaction.state.log.replication.factor: 1 #3
transaction.state.log.min.isr: 1 #2
log.message.format.version: "3.0"
inter.broker.protocol.version: "3.0"
storage:
type: ephemeral
zookeeper:
replicas: 1 #3
storage:
type: ephemeral
entityOperator:
topicOperator: {}
userOperator: {}
在运行 kubectl get services 时,我会看到以下内容:
NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE
kubernetes ClusterIP 10.96.0.1 <none> 443/TCP 48m
my-cluster-kafka-0 LoadBalancer 10.107.190.96 <pending> 9094:31964/TCP 29m
my-cluster-kafka-bootstrap ClusterIP 10.99.34.246 <none> 9091/TCP,9092/TCP,9093/TCP 43m
my-cluster-kafka-brokers ClusterIP None <none> 9090/TCP,9091/TCP,9092/TCP,9093/TCP 43m
my-cluster-kafka-external-bootstrap LoadBalancer 10.99.91.68 <pending> 9094:31442/TCP 29m
my-cluster-zookeeper-client ClusterIP 10.101.216.35 <none> 2181/TCP 45m
my-cluster-zookeeper-nodes ClusterIP None <none> 2181/TCP,2888/TCP,3888/TCP 45m
注意my-cluster-kafka-0 和my-cluster-kafka-external-bootstrap 有一个<pending> EXTERNAL-IP。我的 YAML 文件中缺少什么来提供对 my-cluster-kafka-0 的双向外部访问?
【问题讨论】:
-
我一直在深入研究 Strimzi 文档,发现 5.2. Setting up access for clients outside of Kubernetes 示例指定了
authorization部分。如果我要使用 kcat 进行测试,是否仍需要这样做? -
以上与3.2. Accessing Kafka using loadbalancers 冲突,但显示我可能缺少的只是 CA 证书。谁能证实这一点?
标签: kubernetes networking apache-kafka infrastructure strimzi