Merge pull request #4 from lsdopen/feature/001-rbac

feat: update templates to use values

charts/confluent/Chart.yaml

@@ -1,7 +1,7 @@
 apiVersion: v2
 name: lsdmesp-confluent
-version: "1.0.0"
-appVersion: "1.0.0"
+version: "0.2.0"
+appVersion: "0.2.0"
 description: 'LSDMESP CFK: LSD Event Streaming Platform with Confluent Operator'
 keywords:
   - lsdmesp

charts/confluent/templates/000.ca-pair-sslcerts-secret.yaml

@@ -0,0 +1,8 @@
+apiVersion: v1
+stringData:
+  tls.crt: "{{ .Values.lsdmesp.tls.ca.crt }}"
+  tls.key: "{{ .Values.lsdmesp.tls.ca.key }}"
+kind: Secret
+metadata:
+  name: ca-pair-sslcerts
+type: kubernetes.io/tls

charts/confluent/templates/000.connect-login-secret.yaml

@@ -0,0 +1,14 @@
+{{- $connect := .Values.lsdmesp.confluent.connect -}}
+{{- if $connect.enabled -}}
+apiVersion: v1
+stringData :
+  basic.txt: |-
+    username={{ $connect.username }}
+    password={{ $connect.password }}
+  bearer.txt: |-
+    username={{ $connect.username }}
+    password={{ $connect.password }}
+kind: Secret
+metadata:
+  name: connect-login
+{{- end -}}

charts/confluent/templates/000.controlcenter-login-secret.yaml

@@ -0,0 +1,11 @@
+{{- $controlcenter := .Values.lsdmesp.confluent.controlcenter -}}
+{{- if $controlcenter.enabled -}}
+apiVersion: v1
+stringData:
+  bearer.txt: |-
+    username={{ $controlcenter.username }}
+    password={{ $controlcenter.password }}
+kind: Secret
+metadata:
+  name: controlcenter-login
+{{- end -}}

charts/confluent/templates/000.kafka-login-secret.yaml

@@ -0,0 +1,8 @@
+apiVersion: v1
+stringData:
+  bearer.txt: |-
+    username={{ .Values.lsdmesp.confluent.kafka.username }}
+    password={{ .Values.lsdmesp.confluent.kafka.password }}
+kind: Secret
+metadata:
+  name: kafka-login

charts/confluent/templates/000.kafkarestclass-login-secret.yaml

@@ -0,0 +1,14 @@
+{{- $kafkarestclass := .Values.lsdmesp.confluent.kafkarestclass -}}
+{{- if $kafkarestclass.enabled -}}
+apiVersion: v1
+stringData:
+  basic.txt: |-
+    username={{ $kafkarestclass.username }}
+    password={{ $kafkarestclass.password }}
+  bearer.txt: |-
+    username={{ $kafkarestclass.username }}
+    password={{ $kafkarestclass.password }}
+kind: Secret
+metadata:
+  name: kafkarestclass-login
+{{- end -}}

charts/confluent/templates/000.kafkarestproxy-login-secret.yaml

@@ -0,0 +1,11 @@
+{{- $kafkarestproxy := .Values.lsdmesp.confluent.kafkarestproxy -}}
+{{- if $kafkarestproxy.enabled -}}
+apiVersion: v1
+stringData:
+  bearer.txt: |-
+    username={{ $kafkarestproxy.username }}
+    password={{ $kafkarestproxy.password }}
+kind: Secret
+metadata:
+  name: kafkarestproxy-login
+{{- end -}}

charts/confluent/templates/000.ksqldb-login-secret.yaml

@@ -0,0 +1,13 @@
+{{- $ksqldb := .Values.lsdmesp.confluent.ksqldb -}}
+{{- if $ksqldb.enabled -}}
+apiVersion: v1
+stringData:
+  basic.txt: |-
+    username={{ $ksqldb.username }}
+    password={{ $ksqldb.password }}
+  bearer.txt: |-
+    username={{ $ksqldb.username }}
+    password={{ $ksqldb.password }}
+kind: Secret
+metadata:
+  name: ksqldb-login

charts/confluent/templates/000.mds-login-secret.yaml

@@ -0,0 +1,8 @@
+apiVersion: v1
+stringData:
+  ldap.txt: |-
+    username={{ .Values.lsdmesp.ldap.readOnlyUser.username }}
+    password={{ .Values.lsdmesp.ldap.readOnlyUser.password }}
+kind: Secret
+metadata:
+  name: mds-login

charts/confluent/templates/000.mds-token-secret.yaml

@@ -0,0 +1,7 @@
+apiVersion: v1
+stringData:
+  mdsPublicKey.pem: "{{ .Values.lsdmesp.tls.mds.key }}"
+  mdsTokenKeyPair.pem: "{{ .Values.lsdmesp.tls.mds.publicKey }}"
+kind: Secret
+metadata:
+  name: mds-token

charts/confluent/templates/000.schemaregistry-login-secret.yaml

@@ -0,0 +1,14 @@
+{{- $schemaregistryy := .Values.lsdmesp.confluent.schemaregistryy -}}
+{{- if $schemaregistryy.enabled -}}
+apiVersion: v1
+stringData:
+  basic.txt: |-
+    username={{ .Values.lsdmesp.confluent.schemaregistry.username }}
+    password={{ .Values.lsdmesp.confluent.schemaregistry.password }}
+  bearer.txt: |-
+    username={{ .Values.lsdmesp.confluent.schemaregistry.username }}
+    password={{ .Values.lsdmesp.confluent.schemaregistry.password }}
+kind: Secret
+metadata:
+  name: schemaregistry-login
+{{- end -}}

charts/confluent/templates/010.kraftcontroller.yaml

@@ -1,5 +1,4 @@
 {{- $kraftcontroller := .Values.lsdmesp.confluent.kraftcontroller -}}
-{{- if $kraftcontroller.enabled -}}
 apiVersion: platform.confluent.io/v1beta1
 kind: KRaftController
 metadata:
@@ -35,4 +34,3 @@ spec:
     name: {{ .Values.lsdmesp.storageClass }}
   tls:
     autoGeneratedCerts: true
-{{- end -}}

charts/confluent/values.yaml

@@ -6,10 +6,24 @@ lsdmesp:
   defaultReplicationFactor: 3
   defaultMinInSyncReplicas: 2
   defaultNumPartitions: 6
+
+  tls:
+    ca:
+      cert: ""
+      key: ""
+    mds:
+      key: ""
+      publicKey: ""
+
+  ldap:
+    # if `true`, then will be provisioned
+    enabled: true
+    readOnlyUser:
+      username: mds
+      password: ""
+
   confluent:
     kraftcontroller:
-      # if `true`, then will be provisioned
-      enabled: true
       # java memory sizes
       jvm:
         Xms: 384m
@@ -30,6 +44,9 @@ lsdmesp:
     kafka:
       # if `true`, then will be provisioned
       enabled: true
+      # credential config
+      username: cf_kafka
+      password: ""
       # java memory sizes
       jvm:
         Xms: 1g
@@ -50,10 +67,16 @@ lsdmesp:
     kafkarestclass:
       # if `true`, then will be provisioned
       enabled: true
+      # credential config
+      username: cf_kafka
+      password: ""
 
     schemaregistry:
       # if `true`, then will be provisioned
       enabled: true
+      # credential config
+      username: cf_schemaregistry
+      password: ""
       # java memory sizes
       jvm:
         Xms: 384m
@@ -72,6 +95,9 @@ lsdmesp:
     connect:
       # if `true`, then will be provisioned
       enabled: true
+      # credential config
+      username: cf_connect
+      password: ""
       # java memory sizes
       jvm:
         Xms: 512m
@@ -90,6 +116,9 @@ lsdmesp:
     ksqldb:
       # if `true`, then will be provisioned
       enabled: true
+      # credential config
+      username: cf_ksqldb
+      password: ""
       # java memory sizes
       jvm:
         Xms: 512m
@@ -110,6 +139,9 @@ lsdmesp:
     kafkarestproxy:
       # if `true`, then will be provisioned
       enabled: true
+      # credential config
+      username: cf_restproxy
+      password: ""
       # java memory sizes
       jvm:
         Xms: 384m
@@ -128,6 +160,9 @@ lsdmesp:
     controlcenter:
       # if `true`, then will be provisioned
       enabled: true
+      # credential config
+      username: cf_controlcenter
+      password: ""
       # java memory sizes
       jvm:
         Xms: 2g