Configuration to connect to Kafka Cluster with client cert?

[wolferikg]

Hello,
so i installed the "kafka-ui" via helm chart.
Now i'm trying to connect to a cluster with SSL authentication. For that i need to supply the UI with it's client certificate.
I'm unable to find any information as to how to configure this via the values.yml file. I also tried via environment variables... but for those too i'm unable to find any comprehensive information here. I've tried for hours...

At startup the config properties are being logged out:

AdminClientConfig values:
        bootstrap.servers = [kafka1-kafka-bootstrap:9092]
        client.dns.lookup = use_all_dns_ips
        client.id =
        connections.max.idle.ms = 300000
        default.api.timeout.ms = 60000
        metadata.max.age.ms = 300000
        metric.reporters = []
        metrics.num.samples = 2
        metrics.recording.level = INFO
        metrics.sample.window.ms = 30000
        receive.buffer.bytes = 65536
        reconnect.backoff.max.ms = 1000
        reconnect.backoff.ms = 50
        request.timeout.ms = 30000
        retries = 2147483647
        retry.backoff.ms = 100
        sasl.client.callback.handler.class = null
        sasl.jaas.config = null
        sasl.kerberos.kinit.cmd = /usr/bin/kinit
        sasl.kerberos.min.time.before.relogin = 60000
        sasl.kerberos.service.name = null
        sasl.kerberos.ticket.renew.jitter = 0.05
        sasl.kerberos.ticket.renew.window.factor = 0.8
        sasl.login.callback.handler.class = null
        sasl.login.class = null
        sasl.login.refresh.buffer.seconds = 300
        sasl.login.refresh.min.period.seconds = 60
        sasl.login.refresh.window.factor = 0.8
        sasl.login.refresh.window.jitter = 0.05
        sasl.mechanism = GSSAPI
        security.protocol = PLAINTEXT
        security.providers = null
        send.buffer.bytes = 131072
        socket.connection.setup.timeout.max.ms = 30000
        socket.connection.setup.timeout.ms = 10000
        ssl.cipher.suites = null
        ssl.enabled.protocols = [TLSv1.2, TLSv1.3]
        ssl.endpoint.identification.algorithm = https
        ssl.engine.factory.class = null
        ssl.key.password = null
        ssl.keymanager.algorithm = SunX509
        ssl.keystore.certificate.chain = null
        ssl.keystore.key = null
        ssl.keystore.location = null
        ssl.keystore.password = null
        ssl.keystore.type = JKS
        ssl.protocol = TLSv1.3
        ssl.provider = null
        ssl.secure.random.implementation = null
        ssl.trustmanager.algorithm = PKIX
        ssl.truststore.certificates = null
        ssl.truststore.location = null
        ssl.truststore.password = null
        ssl.truststore.type = JKS

so how can i set these properties in particular via the values.yml file?

ssl.protocol=SSL
security.protocol=SSL
ssl.truststore.location=/path/to/kafka.client.truststore.jks
ssl.truststore.type=JKS
ssl.truststore.password=somepass
ssl.keystore.location=/path/to/user.p12
ssl.keystore.type=PKCS12
ssl.keystore.password=somepass

Thanks

[Haarolean]

Hi,

here's an example config to enable SSL:
https://github.com/provectus/kafka-ui/blob/master/documentation/compose/kafka-ssl.yml
This example contains just the truststore, in order to pass a client cert, you'll have to add keystore the same way.
And you can use these values (they're env variables) the same way in helm. Alternatively, you can use an external application config in yml format: #1917