Added docker-compose ranpm

[nonrtric/plt/ranpm.git] / docker-proj / config / kafka / strimzi.properties

diff --git a/docker-proj/config/kafka/strimzi.properties b/docker-proj/config/kafka/strimzi.properties
new file mode 100644 (file)
index 0000000..320f16d
--- /dev/null
+++ b/docker-proj/config/kafka/strimzi.properties
@@ -0,0 +1,77 @@
+#  ============LICENSE_START===============================================
+#  Copyright (C) 2023 Nordix Foundation. All rights reserved.
+#  ========================================================================
+#  Licensed under the Apache License, Version 2.0 (the "License");
+#  you may not use this file except in compliance with the License.
+#  You may obtain a copy of the License at
+#
+#       http://www.apache.org/licenses/LICENSE-2.0
+#
+#  Unless required by applicable law or agreed to in writing, software
+#  distributed under the License is distributed on an "AS IS" BASIS,
+#  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+#  See the License for the specific language governing permissions and
+#  limitations under the License.
+#  ============LICENSE_END=================================================
+#
+
+##########
+# Broker ID
+##########
+broker.id=0
+node.id=0
+
+##########
+# Zookeeper
+##########
+zookeeper.connect=zookeeper-1:2181
+zookeeper.clientCnxnSocket=org.apache.zookeeper.ClientCnxnSocketNetty
+
+##########
+# Kafka message logs configuration
+##########
+log.dirs=/tmp/logs
+
+##########
+# Listener configuration: SASL-9097
+##########
+listener.name.sasl-9097.oauthbearer.sasl.server.callback.handler.class=io.strimzi.kafka.oauth.server.JaasServerOauthValidatorCallbackHandler
+listener.name.sasl-9097.oauthbearer.sasl.jaas.config=org.apache.kafka.common.security.oauthbearer.OAuthBearerLoginModule required unsecuredLoginStringClaim_sub="thePrincipalName" oauth.valid.issuer.uri="https://keycloak:8443/realms/nonrtric-realm" oauth.jwks.endpoint.uri="http://keycloak:8080/realms/nonrtric-realm/protocol/openid-connect/certs" oauth.username.claim="preferred_username" oauth.config.id="SASL-9097";
+listener.name.sasl-9097.plain.sasl.server.callback.handler.class=io.strimzi.kafka.oauth.server.plain.JaasServerOauthOverPlainValidatorCallbackHandler
+listener.name.sasl-9097.plain.sasl.jaas.config=org.apache.kafka.common.security.plain.PlainLoginModule required oauth.valid.issuer.uri="https://keycloak:8443/realms/nonrtric-realm" oauth.jwks.endpoint.uri="http://keycloak:8080/realms/nonrtric-realm/protocol/openid-connect/certs" oauth.username.claim="preferred_username" oauth.config.id="SASL-9097";
+listener.name.sasl-9097.sasl.enabled.mechanisms=OAUTHBEARER,PLAIN
+listener.name.sasl-9097.connections.max.reauth.ms=300000
+
+
+principal.builder.class=io.strimzi.kafka.oauth.server.OAuthKafkaPrincipalBuilder
+
+##########
+# Common listener configuration
+##########
+listener.security.protocol.map=PLAIN-9092:PLAINTEXT,SASL-9097:SASL_PLAINTEXT
+listeners=PLAIN-9092://:9092,SASL-9097://:9097
+advertised.listeners=PLAIN-9092://kafka-1:9092,SASL-9097://kafka-1:9097
+inter.broker.listener.name=PLAIN-9092
+sasl.enabled.mechanisms=
+
+##########
+# Authorization
+##########
+authorizer.class.name=org.openpolicyagent.kafka.OpaAuthorizer
+opa.authorizer.url=http://opa-kafka:8181/v1/data/kafka/authz/allow
+opa.authorizer.allow.on.error=false
+opa.authorizer.metrics.enabled=false
+opa.authorizer.cache.initial.capacity=5000
+opa.authorizer.cache.maximum.size=50000
+opa.authorizer.cache.expire.after.seconds=3600
+
+##########
+# User provided configuration
+##########
+default.replication.factor=1
+inter.broker.protocol.version=3.3
+min.insync.replicas=1
+offsets.topic.replication.factor=1
+transaction.state.log.min.isr=1
+transaction.state.log.replication.factor=1
+log.message.format.version=3.3