fix: Add missing KAFKA_SSL_KEYSTORE_FILENAME and KAFKA_SSL_TRUSTSTORE_FILENAME

- Add KAFKA_SSL_KEYSTORE_FILENAME=kafka.server.keystore.jks to Kafka configuration
- Add KAFKA_SSL_TRUSTSTORE_FILENAME=kafka.server.truststore.jks to Kafka configuration
- Update env.example with new SSL filename variables
- Update .env with new SSL filename variables

Fixes:
- KAFKA_SSL_KEYSTORE_FILENAME is required error in Kafka startup
- SSL configuration now properly references keystore and truststore filenames

Author: Сергей Антропов
Site: https://devops.org.ru
This commit is contained in:
Sergey Antropoff 2025-09-10 18:13:00 +03:00
parent 36ed1da92a
commit c68041dcb8
2 changed files with 4 additions and 0 deletions

View File

@ -49,9 +49,11 @@ services:
KAFKA_LOG_RETENTION_CHECK_INTERVAL_MS: ${KAFKA_LOG_RETENTION_CHECK_INTERVAL_MS:-300000}
# SSL настройки
KAFKA_SSL_KEYSTORE_LOCATION: /var/ssl/private/kafka.server.keystore.jks
KAFKA_SSL_KEYSTORE_FILENAME: kafka.server.keystore.jks
KAFKA_SSL_KEYSTORE_PASSWORD: ${KAFKA_SSL_KEYSTORE_PASSWORD:-kafka123}
KAFKA_SSL_KEY_PASSWORD: ${KAFKA_SSL_KEY_PASSWORD:-kafka123}
KAFKA_SSL_TRUSTSTORE_LOCATION: /var/ssl/private/kafka.server.truststore.jks
KAFKA_SSL_TRUSTSTORE_FILENAME: kafka.server.truststore.jks
KAFKA_SSL_TRUSTSTORE_PASSWORD: ${KAFKA_SSL_TRUSTSTORE_PASSWORD:-kafka123}
KAFKA_SSL_CLIENT_AUTH: ${KAFKA_SSL_CLIENT_AUTH:-none}
KAFKA_SSL_ENDPOINT_IDENTIFICATION_ALGORITHM: ${KAFKA_SSL_ENDPOINT_IDENTIFICATION_ALGORITHM:-https}

View File

@ -45,8 +45,10 @@ KAFKA_CLIENT_ID=sensus-worker
# Kafka SSL
KAFKA_SSL_PORT=9093
KAFKA_SSL_KEYSTORE_FILENAME=kafka.server.keystore.jks
KAFKA_SSL_KEYSTORE_PASSWORD=kafka123
KAFKA_SSL_KEY_PASSWORD=kafka123
KAFKA_SSL_TRUSTSTORE_FILENAME=kafka.server.truststore.jks
KAFKA_SSL_TRUSTSTORE_PASSWORD=kafka123
KAFKA_SSL_CLIENT_AUTH=none
KAFKA_SSL_ENDPOINT_IDENTIFICATION_ALGORITHM=https