Skip to content

Commit b78e3f9

Browse files
Merge pull request #288741 from PatAltimore/patricka-mqtt-portal
Fix MQTT default reference names
2 parents ee66d4d + 7712c6d commit b78e3f9

File tree

6 files changed

+28
-28
lines changed

6 files changed

+28
-28
lines changed

articles/iot-operations/manage-mqtt-broker/howto-configure-authentication.md

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -30,10 +30,10 @@ To link a BrokerListener to a *BrokerAuthentication* resource, specify the `auth
3030

3131
## Default BrokerAuthentication resource
3232

33-
Azure IoT Operations Preview deploys a default *BrokerAuthentication* resource named `authn` linked with the default listener named `listener` in the `azure-iot-operations` namespace. It's configured to only use Kubernetes Service Account Tokens (SATs) for authentication. To inspect it, run:
33+
Azure IoT Operations Preview deploys a default *BrokerAuthentication* resource named `default` linked with the *default* listener in the `azure-iot-operations` namespace. It's configured to only use Kubernetes Service Account Tokens (SATs) for authentication. To inspect it, run:
3434

3535
```bash
36-
kubectl get brokerauthentication authn -n azure-iot-operations -o yaml
36+
kubectl get brokerauthentication default -n azure-iot-operations -o yaml
3737
```
3838

3939
The output shows the default *BrokerAuthentication* resource, with metadata removed for brevity:
@@ -42,14 +42,14 @@ The output shows the default *BrokerAuthentication* resource, with metadata remo
4242
apiVersion: mqttbroker.iotoperations.azure.com/v1beta1
4343
kind: BrokerAuthentication
4444
metadata:
45-
name: authn
45+
name: default
4646
namespace: azure-iot-operations
4747
spec:
4848
authenticationMethods:
4949
- method: ServiceAccountToken
5050
serviceAccountTokenSettings:
5151
audiences:
52-
- "aio-internal"
52+
- aio-internal
5353
```
5454
5555
> [!IMPORTANT]
@@ -79,7 +79,7 @@ With multiple authentication methods, MQTT broker has a fallback mechanism. For
7979
apiVersion: mqttbroker.iotoperations.azure.com/v1beta1
8080
kind: BrokerAuthentication
8181
metadata:
82-
name: authn
82+
name: default
8383
namespace: azure-iot-operations
8484
spec:
8585
authenticationMethods:

articles/iot-operations/manage-mqtt-broker/howto-configure-availability-scale.md

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -7,7 +7,7 @@ ms.topic: how-to
77
ms.subservice: azure-mqtt-broker
88
ms.custom:
99
- ignite-2023
10-
ms.date: 09/09/2024
10+
ms.date: 10/18/2024
1111

1212
#CustomerIntent: As an operator, I want to understand the settings for the MQTT broker so that I can configure it for high availability and scale.
1313
ms.service: azure-iot-operations
@@ -91,10 +91,10 @@ Medium is the default profile.
9191

9292
## Default broker
9393

94-
By default, Azure IoT Operations Preview deploys a default Broker resource named `broker`. It's deployed in the `azure-iot-operations` namespace with cardinality and memory profile settings as configured during the initial deployment with Azure portal or Azure CLI. To see the settings, run the following command:
94+
By default, Azure IoT Operations Preview deploys a default Broker resource named `default`. It's deployed in the `azure-iot-operations` namespace with cardinality and memory profile settings as configured during the initial deployment with Azure portal or Azure CLI. To see the settings, run the following command:
9595

9696
```bash
97-
kubectl get broker broker -n azure-iot-operations -o yaml
97+
kubectl get broker default -n azure-iot-operations -o yaml
9898
```
9999

100100
### Modify default broker by redeploying
@@ -104,16 +104,16 @@ Only [cardinality](#configure-scaling-settings) and [memory profile](#configure-
104104
To delete the default broker, run the following command:
105105

106106
```bash
107-
kubectl delete broker broker -n azure-iot-operations
107+
kubectl delete broker default -n azure-iot-operations
108108
```
109109

110-
Then, create a YAML file with desired settings. For example, the following YAML file configures the broker with name `broker` in namespace `azure-iot-operations` with `medium` memory profile and `distributed` mode with two frontend replicas and two backend chains with two partitions and two workers each. Also, the [encryption of internal traffic option](#configure-encryption-of-internal-traffic) is disabled.
110+
Then, create a YAML file with desired settings. For example, the following YAML file configures the broker with name `default` in namespace `azure-iot-operations` with `medium` memory profile and `distributed` mode with two frontend replicas and two backend chains with two partitions and two workers each. Also, the [encryption of internal traffic option](#configure-encryption-of-internal-traffic) is disabled.
111111

112112
```yaml
113113
apiVersion: mqttbroker.iotoperations.azure.com/v1beta1
114114
kind: Broker
115115
metadata:
116-
name: broker
116+
name: default
117117
namespace: azure-iot-operations
118118
spec:
119119
memoryProfile: medium
@@ -136,15 +136,15 @@ kubectl apply -f <path-to-yaml-file>
136136

137137
## Configure MQTT broker advanced settings
138138

139-
The broker advanced settings include client configurations, encryption of internal traffic, and certificate rotations. For more information on the advanced settings, see the [Broker]() API reference.
139+
The broker advanced settings include client configurations, encryption of internal traffic, and certificate rotations. For more information on the advanced settings, see the [Broker](/rest/api/iotoperations/broker/create-or-update) API reference.
140140

141141
Here's an example of a *Broker* with advanced settings:
142142

143143
```yml
144144
apiVersion: mqttbroker.iotoperations.azure.com/v1beta1
145145
kind: Broker
146146
metadata:
147-
name: broker
147+
name: default
148148
namespace: azure-iot-operations
149149
spec:
150150
advanced:

articles/iot-operations/manage-mqtt-broker/howto-configure-brokerlistener.md

Lines changed: 11 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -7,7 +7,7 @@ ms.subservice: azure-mqtt-broker
77
ms.topic: how-to
88
ms.custom:
99
- ignite-2023
10-
ms.date: 10/08/2024
10+
ms.date: 10/18/2024
1111

1212
#CustomerIntent: As an operator, I want understand options to secure MQTT communications for my IoT Operations solution.
1313
ms.service: azure-iot-operations
@@ -26,7 +26,7 @@ Each listener port can have its own authentication and authorization rules that
2626
2727
Listeners have the following characteristics:
2828

29-
- You can have up to three listeners. One listener per service type of `loadBalancer`, `clusterIp`, or `nodePort`. The default *BrokerListener* named *listener* is service type `clusterIp`.
29+
- You can have up to three listeners. One listener per service type of `loadBalancer`, `clusterIp`, or `nodePort`. The default *BrokerListener* named *default* is service type `clusterIp`.
3030
- Each listener supports multiple ports
3131
- BrokerAuthentication and BrokerAuthorization references are per port
3232
- TLS configuration is per port
@@ -37,7 +37,7 @@ For a list of the available settings, see the [Broker Listener](/rest/api/iotope
3737

3838
## Default BrokerListener
3939

40-
When you deploy Azure IoT Operations Preview, the deployment also creates a *BrokerListener* resource named `listener` in the `azure-iot-operations` namespace. This listener is linked to the default Broker resource named `broker` that's also created during deployment. The default listener exposes the broker on port 18883 with TLS and SAT authentication enabled. The TLS certificate is [automatically managed](howto-configure-tls-auto.md) by cert-manager. Authorization is disabled by default.
40+
When you deploy Azure IoT Operations Preview, the deployment also creates a *BrokerListener* resource named `default` in the `azure-iot-operations` namespace. This listener is linked to the default *Broker* resource named `default` that's also created during deployment. The default listener exposes the broker on port 18883 with TLS and SAT authentication enabled. The TLS certificate is [automatically managed](howto-configure-tls-auto.md) by cert-manager. Authorization is disabled by default.
4141

4242
To view or edit the listener:
4343

@@ -59,7 +59,7 @@ To view or edit the listener:
5959
To view the default *BrokerListener* resource, use the following command:
6060

6161
```bash
62-
kubectl get brokerlistener listener -n azure-iot-operations -o yaml
62+
kubectl get brokerlistener default -n azure-iot-operations -o yaml
6363
```
6464

6565
The output should look similar to this, with most metadata removed for brevity:
@@ -68,15 +68,15 @@ The output should look similar to this, with most metadata removed for brevity:
6868
apiVersion: mqttbroker.iotoperations.azure.com/v1beta1
6969
kind: BrokerListener
7070
metadata:
71-
name: listener
71+
name: default
7272
namespace: azure-iot-operations
7373
spec:
74-
brokerRef: broker
74+
brokerRef: default
7575
serviceName: aio-broker
7676
serviceType: ClusterIp
7777
ports:
78-
- port: 18883
79-
authenticationRef: authn
78+
- authenticationRef: default
79+
port: 18883
8080
protocol: Mqtt
8181
tls:
8282
certManagerCertificateSpec:
@@ -94,7 +94,7 @@ To learn more about the default BrokerAuthentication resource linked to this lis
9494
The default *BrokerListener* uses the service type *ClusterIp*. You can have only one listener per service type. If you want to add more ports to service type *ClusterIp*, you can update the default listener to add more ports. For example, you could add a new port 1883 with no TLS and authentication off with the following kubectl patch command:
9595
9696
```bash
97-
kubectl patch brokerlistener listener -n azure-iot-operations --type='json' -p='[{"op": "add", "path": "/spec/ports/", "value": {"port": 1883, "protocol": "Mqtt"}}]'
97+
kubectl patch brokerlistener default -n azure-iot-operations --type='json' -p='[{"op": "add", "path": "/spec/ports/", "value": {"port": 1883, "protocol": "Mqtt"}}]'
9898
```
9999
100100
---
@@ -139,14 +139,14 @@ metadata:
139139
name: loadbalancer-listener
140140
namespace: azure-iot-operations
141141
spec:
142-
brokerRef: broker
142+
brokerRef: default
143143
serviceType: LoadBalancer
144144
serviceName: aio-broker-loadbalancer
145145
ports:
146146
- port: 1883
147147
protocol: Mqtt
148148
- port: 18883
149-
authenticationRef: authn
149+
authenticationRef: default
150150
protocol: Mqtt
151151
tls:
152152
mode: Automatic

articles/iot-operations/manage-mqtt-broker/howto-configure-tls-auto.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -7,7 +7,7 @@ ms.subservice: azure-mqtt-broker
77
ms.topic: how-to
88
ms.custom:
99
- ignite-2023
10-
ms.date: 08/22/2024
10+
ms.date: 10/18/2024
1111

1212
#CustomerIntent: As an operator, I want to configure MQTT broker to use TLS so that I have secure communication between the MQTT broker and client.
1313
ms.service: azure-iot-operations
@@ -182,7 +182,7 @@ metadata:
182182
name: my-new-tls-listener
183183
namespace: azure-iot-operations
184184
spec:
185-
brokerRef: broker
185+
brokerRef: default
186186
serviceType: loadBalancer
187187
serviceName: my-new-tls-listener # Avoid conflicts with default service name 'aio-broker'
188188
ports:

articles/iot-operations/manage-mqtt-broker/howto-configure-tls-manual.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -85,7 +85,7 @@ metadata:
8585
name: manual-tls-listener
8686
namespace: azure-iot-operations
8787
spec:
88-
brokerRef: broker
88+
brokerRef: default
8989
serviceType: loadBalancer # Optional, defaults to clusterIP
9090
serviceName: mqtts-endpoint # Match the SAN in the server certificate
9191
ports:

articles/iot-operations/manage-mqtt-broker/howto-test-connection.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -292,7 +292,7 @@ If you understand the risks and need to use an insecure port in a well-controlle
292292
name: non-tls-listener
293293
namespace: azure-iot-operations
294294
spec:
295-
brokerRef: broker
295+
brokerRef: default
296296
serviceType: loadBalancer
297297
serviceName: my-unique-service-name
298298
authenticationEnabled: false

0 commit comments

Comments
 (0)