You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/iot-operations/manage-mqtt-broker/howto-configure-authentication.md
+5-5Lines changed: 5 additions & 5 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -30,10 +30,10 @@ To link a BrokerListener to a *BrokerAuthentication* resource, specify the `auth
30
30
31
31
## Default BrokerAuthentication resource
32
32
33
-
Azure IoT Operations Preview deploys a default *BrokerAuthentication* resource named `authn` linked with the default listener named `listener` in the `azure-iot-operations` namespace. It's configured to only use Kubernetes Service Account Tokens (SATs) for authentication. To inspect it, run:
33
+
Azure IoT Operations Preview deploys a default *BrokerAuthentication* resource named `default` linked with the *default* listener in the `azure-iot-operations` namespace. It's configured to only use Kubernetes Service Account Tokens (SATs) for authentication. To inspect it, run:
34
34
35
35
```bash
36
-
kubectl get brokerauthentication authn -n azure-iot-operations -o yaml
36
+
kubectl get brokerauthentication default -n azure-iot-operations -o yaml
37
37
```
38
38
39
39
The output shows the default *BrokerAuthentication* resource, with metadata removed for brevity:
@@ -42,14 +42,14 @@ The output shows the default *BrokerAuthentication* resource, with metadata remo
Copy file name to clipboardExpand all lines: articles/iot-operations/manage-mqtt-broker/howto-configure-availability-scale.md
+8-8Lines changed: 8 additions & 8 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -7,7 +7,7 @@ ms.topic: how-to
7
7
ms.subservice: azure-mqtt-broker
8
8
ms.custom:
9
9
- ignite-2023
10
-
ms.date: 09/09/2024
10
+
ms.date: 10/18/2024
11
11
12
12
#CustomerIntent: As an operator, I want to understand the settings for the MQTT broker so that I can configure it for high availability and scale.
13
13
ms.service: azure-iot-operations
@@ -91,10 +91,10 @@ Medium is the default profile.
91
91
92
92
## Default broker
93
93
94
-
By default, Azure IoT Operations Preview deploys a default Broker resource named `broker`. It's deployed in the `azure-iot-operations` namespace with cardinality and memory profile settings as configured during the initial deployment with Azure portal or Azure CLI. To see the settings, run the following command:
94
+
By default, Azure IoT Operations Preview deploys a default Broker resource named `default`. It's deployed in the `azure-iot-operations` namespace with cardinality and memory profile settings as configured during the initial deployment with Azure portal or Azure CLI. To see the settings, run the following command:
95
95
96
96
```bash
97
-
kubectl get broker broker -n azure-iot-operations -o yaml
97
+
kubectl get broker default -n azure-iot-operations -o yaml
98
98
```
99
99
100
100
### Modify default broker by redeploying
@@ -104,16 +104,16 @@ Only [cardinality](#configure-scaling-settings) and [memory profile](#configure-
104
104
To delete the default broker, run the following command:
Then, create a YAML file with desired settings. For example, the following YAML file configures the broker with name `broker` in namespace `azure-iot-operations` with `medium` memory profile and `distributed` mode with two frontend replicas and two backend chains with two partitions and two workers each. Also, the [encryption of internal traffic option](#configure-encryption-of-internal-traffic) is disabled.
110
+
Then, create a YAML file with desired settings. For example, the following YAML file configures the broker with name `default` in namespace `azure-iot-operations` with `medium` memory profile and `distributed` mode with two frontend replicas and two backend chains with two partitions and two workers each. Also, the [encryption of internal traffic option](#configure-encryption-of-internal-traffic) is disabled.
The broker advanced settings include client configurations, encryption of internal traffic, and certificate rotations. For more information on the advanced settings, see the [Broker]() API reference.
139
+
The broker advanced settings include client configurations, encryption of internal traffic, and certificate rotations. For more information on the advanced settings, see the [Broker](/rest/api/iotoperations/broker/create-or-update) API reference.
140
140
141
141
Here's an example of a *Broker* with advanced settings:
Copy file name to clipboardExpand all lines: articles/iot-operations/manage-mqtt-broker/howto-configure-brokerlistener.md
+11-11Lines changed: 11 additions & 11 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -7,7 +7,7 @@ ms.subservice: azure-mqtt-broker
7
7
ms.topic: how-to
8
8
ms.custom:
9
9
- ignite-2023
10
-
ms.date: 10/08/2024
10
+
ms.date: 10/18/2024
11
11
12
12
#CustomerIntent: As an operator, I want understand options to secure MQTT communications for my IoT Operations solution.
13
13
ms.service: azure-iot-operations
@@ -26,7 +26,7 @@ Each listener port can have its own authentication and authorization rules that
26
26
27
27
Listeners have the following characteristics:
28
28
29
-
- You can have up to three listeners. One listener per service type of `loadBalancer`, `clusterIp`, or `nodePort`. The default *BrokerListener* named *listener* is service type `clusterIp`.
29
+
- You can have up to three listeners. One listener per service type of `loadBalancer`, `clusterIp`, or `nodePort`. The default *BrokerListener* named *default* is service type `clusterIp`.
30
30
- Each listener supports multiple ports
31
31
- BrokerAuthentication and BrokerAuthorization references are per port
32
32
- TLS configuration is per port
@@ -37,7 +37,7 @@ For a list of the available settings, see the [Broker Listener](/rest/api/iotope
37
37
38
38
## Default BrokerListener
39
39
40
-
When you deploy Azure IoT Operations Preview, the deployment also creates a *BrokerListener* resource named `listener` in the `azure-iot-operations` namespace. This listener is linked to the default Broker resource named `broker` that's also created during deployment. The default listener exposes the broker on port 18883 with TLS and SAT authentication enabled. The TLS certificate is [automatically managed](howto-configure-tls-auto.md) by cert-manager. Authorization is disabled by default.
40
+
When you deploy Azure IoT Operations Preview, the deployment also creates a *BrokerListener* resource named `default` in the `azure-iot-operations` namespace. This listener is linked to the default *Broker* resource named `default` that's also created during deployment. The default listener exposes the broker on port 18883 with TLS and SAT authentication enabled. The TLS certificate is [automatically managed](howto-configure-tls-auto.md) by cert-manager. Authorization is disabled by default.
41
41
42
42
To view or edit the listener:
43
43
@@ -59,7 +59,7 @@ To view or edit the listener:
59
59
To view the default *BrokerListener* resource, use the following command:
60
60
61
61
```bash
62
-
kubectl get brokerlistener listener -n azure-iot-operations -o yaml
62
+
kubectl get brokerlistener default -n azure-iot-operations -o yaml
63
63
```
64
64
65
65
The output should look similar to this, with most metadata removed for brevity:
@@ -68,15 +68,15 @@ The output should look similar to this, with most metadata removed for brevity:
@@ -94,7 +94,7 @@ To learn more about the default BrokerAuthentication resource linked to this lis
94
94
The default *BrokerListener* uses the service type *ClusterIp*. You can have only one listener per service type. If you want to add more ports to service type *ClusterIp*, you can update the default listener to add more ports. For example, you could add a new port 1883 with no TLS and authentication off with the following kubectl patch command:
0 commit comments