ZPDEV - Kafka启用SASL进行身份验证及容器实践
https://github.com/WhiteStart/bitnami-kafka-cluster
Docker部署Kafka集群,增加 SASL_SSL认证,并集成到Spring Boot,无Zookeeper版_docker kafka 3.9.0-CSDN博客
docker部署kafka集群带密码sasl认证 | 知识殿堂
# cat kafka_server_jaas.conf
kafka_server_jaas.conf
KafkaServer {
org.apache.kafka.common.security.scram.ScramLoginModule required
username="admin"
password="admin2024"
user_admin="admin2024"
user_kafka="kafka@2024";
};
Client {
org.apache.kafka.common.security.plain.PlainLoginModule required
username="kafka"
password="kafka@2024";
};
cat /data/kafka/zookeeper-config/zk_server.conf Server{org.apache.zookeeper.server.auth.DigestLoginModule requiredusername="admin"password="admin2024"user_admin="admin2024"user_kafka="kafka@2024";
};QuorumServer {org.apache.zookeeper.server.auth.DigestLoginModule requireduser_zookeeper="zookeeper@2024";
};QuorumLearner {org.apache.zookeeper.server.auth.DigestLoginModule requiredusername="zookeeper"password="zookeeper@2024";
};
version: '3.1'
services:zoo1:image: docker.io/zookeeper:3.7.0restart: alwayscontainer_name: pro-zookeeper-001ports:- 2181:2181- 2888:2888- 3888:3888volumes:- /etc/localtime:/etc/localtime- ./zookeeper-data:/data- ./zookeeper-datalog:/datalog- ./zookeeper-config:/confenvironment:ZOO_MY_ID: 1ZOO_SERVERS: server.1=0.0.0.0:2888:3888;2181 server.2=192.168.10.22:2888:3888;2181 server.3=192.168.10.23:2888:3888;2181ZOO_CFG_EXTRA: "requireClientAuthScheme=sasl authProvider.1=org.apache.zookeeper.server.auth.SASLAuthenticationProvider"SERVER_JVMFLAGS: "-Djava.security.auth.login.config=/conf/zk_server.conf"CLIENT_JVMFLAGS: "-Djava.security.auth.login.config=/conf/zk_client.conf"kafka1:image: docker.io/wurstmeister/kafka:2.12-2.5.0restart: alwayscontainer_name: pro-kafka-001ports:- 9092:9092environment:KAFKA_ADVERTISED_HOST_NAME: 192.168.10.21KAFKA_HOST_NAME: 192.168.10.21KAFKA_ADVERTISED_PORT: 9092KAFKA_BROKER_ID: 1KAFKA_ZOOKEEPER_CONNECT: 192.168.10.21:2181,192.168.10.22:2181,192.168.10.23:2181KAFKA_ADVERTISED_LISTENERS: SASL_PLAINTEXT://192.168.10.21:9092KAFKA_LISTENERS: SASL_PLAINTEXT://:9092KAFKA_SECURITY_INTER_BROKER_PROTOCOL: SASL_PLAINTEXTKAFKA_SASL_MECHANISM_INTER_BROKER_PROTOCOL: SCRAM-SHA-256KAFKA_SASL_ENABLED_MECHANISMS: SCRAM-SHA-256KAFKA_OPTS: -Djava.security.auth.login.config=/opt/kafka_2.12-2.5.0/config/kafka_server_jaas.confKAFKA_JVM_PERFORMANCE_OPTS: -Xmx2G -Xms1G KAFKA_OFFSETS_TOPIC_REPLICATION_FACTOR: 3KAFKA_DEFAULT_REPLICATION_FACTOR: 3volumes:- ./kafka-data:/kafka- ./kafka-config:/opt/kafka_2.12-2.5.0/config- /etc/localtime:/etc/localtime