mirror of
https://github.com/didi/KnowStreaming.git
synced 2026-01-04 20:02:07 +08:00
92 lines
3.9 KiB
Properties
92 lines
3.9 KiB
Properties
# Licensed to the Apache Software Foundation (ASF) under one or more
|
|
# contributor license agreements. See the NOTICE file distributed with
|
|
# this work for additional information regarding copyright ownership.
|
|
# The ASF licenses this file to You under the Apache License, Version 2.0
|
|
# (the "License"); you may not use this file except in compliance with
|
|
# the License. You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
|
|
# see kafka.server.KafkaConfig for additional details and defaults
|
|
advertised.host.name={{ node.account.hostname }}
|
|
|
|
|
|
listeners={{ listeners }}
|
|
advertised.listeners={{ advertised_listeners }}
|
|
listener.security.protocol.map={{ listener_security_protocol_map }}
|
|
|
|
{% if node.version.supports_named_listeners() %}
|
|
inter.broker.listener.name={{ interbroker_listener.name }}
|
|
{% else %}
|
|
security.inter.broker.protocol={{ interbroker_listener.security_protocol }}
|
|
{% endif %}
|
|
|
|
{% for k, v in listener_security_config.client_listener_overrides.iteritems() %}
|
|
{% if listener_security_config.requires_sasl_mechanism_prefix(k) %}
|
|
listener.name.{{ security_protocol.lower() }}.{{ security_config.client_sasl_mechanism.lower() }}.{{ k }}={{ v }}
|
|
{% else %}
|
|
listener.name.{{ security_protocol.lower() }}.{{ k }}={{ v }}
|
|
{% endif %}
|
|
{% endfor %}
|
|
|
|
{% if interbroker_listener.name != security_protocol %}
|
|
{% for k, v in listener_security_config.interbroker_listener_overrides.iteritems() %}
|
|
{% if listener_security_config.requires_sasl_mechanism_prefix(k) %}
|
|
listener.name.{{ interbroker_listener.name.lower() }}.{{ security_config.interbroker_sasl_mechanism.lower() }}.{{ k }}={{ v }}
|
|
{% else %}
|
|
listener.name.{{ interbroker_listener.name.lower() }}.{{ k }}={{ v }}
|
|
{% endif %}
|
|
{% endfor %}
|
|
{% endif %}
|
|
|
|
ssl.keystore.location=/mnt/security/test.keystore.jks
|
|
ssl.keystore.password=test-ks-passwd
|
|
ssl.key.password=test-ks-passwd
|
|
ssl.keystore.type=JKS
|
|
ssl.truststore.location=/mnt/security/test.truststore.jks
|
|
ssl.truststore.password=test-ts-passwd
|
|
ssl.truststore.type=JKS
|
|
ssl.endpoint.identification.algorithm=HTTPS
|
|
# Zookeeper TLS settings
|
|
#
|
|
# Note that zookeeper.ssl.client.enable will be set to true or false elsewhere, as appropriate.
|
|
# If it is false then these ZK keystore/truststore settings will have no effect. If it is true then
|
|
# zookeeper.clientCnxnSocket will also be set elsewhere (to org.apache.zookeeper.ClientCnxnSocketNetty)
|
|
{% if not zk.zk_tls_encrypt_only %}
|
|
zookeeper.ssl.keystore.location=/mnt/security/test.keystore.jks
|
|
zookeeper.ssl.keystore.password=test-ks-passwd
|
|
{% endif %}
|
|
zookeeper.ssl.truststore.location=/mnt/security/test.truststore.jks
|
|
zookeeper.ssl.truststore.password=test-ts-passwd
|
|
#
|
|
sasl.mechanism.inter.broker.protocol={{ security_config.interbroker_sasl_mechanism }}
|
|
sasl.enabled.mechanisms={{ ",".join(security_config.enabled_sasl_mechanisms) }}
|
|
sasl.kerberos.service.name=kafka
|
|
{% if authorizer_class_name is not none %}
|
|
ssl.client.auth=required
|
|
authorizer.class.name={{ authorizer_class_name }}
|
|
{% endif %}
|
|
|
|
zookeeper.set.acl={{"true" if zk_set_acl else "false"}}
|
|
|
|
zookeeper.connection.timeout.ms={{ zk_connect_timeout }}
|
|
zookeeper.session.timeout.ms={{ zk_session_timeout }}
|
|
|
|
{% if replica_lag is defined %}
|
|
replica.lag.time.max.ms={{replica_lag}}
|
|
{% endif %}
|
|
|
|
{% if auto_create_topics_enable is defined and auto_create_topics_enable is not none %}
|
|
auto.create.topics.enable={{ auto_create_topics_enable }}
|
|
{% endif %}
|
|
offsets.topic.num.partitions={{ num_nodes }}
|
|
offsets.topic.replication.factor={{ 3 if num_nodes > 3 else num_nodes }}
|
|
# Set to a low, but non-zero value to exercise this path without making tests much slower
|
|
group.initial.rebalance.delay.ms=100
|