feat: support TLS authentication and customized volumes

charts/pulsar-resources-operator/crds/resource.streamnative.io_pulsarconnections.yaml

@@ -169,6 +169,18 @@ spec:
                     - issuerEndpoint
                     - key
                     type: object
+                  tls:
+                    description: PulsarAuthenticationTLS indicates the parameters
+                      which are need by pulsar TLS Authentication
+                    properties:
+                      clientCertificateKeyPath:
+                        type: string
+                      clientCertificatePath:
+                        type: string
+                    required:
+                    - clientCertificateKeyPath
+                    - clientCertificatePath
+                    type: object
                   token:
                     description: |-
                       Token specifies the configuration for token-based authentication.
@@ -212,6 +224,16 @@ spec:
                   ClusterName specifies the name of the local Pulsar cluster.
                   When setting up Geo-Replication between Pulsar instances, this should be enabled to identify the cluster.
                 type: string
+              tlsEnableHostnameVerification:
+                description: TLSEnableHostnameVerification indicates whether to verify the hostname of the broker.
+                  Only used when using secure urls.
+                type: boolean
+              tlsAllowInsecureConnection:
+                description: TLSAllowInsecureConnection indicates whether to allow insecure connection to the broker.
+                type: boolean
+              tlsTrustCertsFilePath:
+                description: TLSTrustCertsFilePath Path for the TLS certificate used to validate the broker endpoint when using TLS.
+                type: string
             type: object
           status:
             description: |-

charts/pulsar-resources-operator/templates/deployment.yaml

@@ -119,10 +119,18 @@ spec:
           periodSeconds: 20
         resources:
           {{- toYaml .Values.resources | nindent 10 }}
+        {{- if .Values.extraVolumeMounts }}
+        volumeMounts:
+          {{- toYaml .Values.extraVolumeMounts | nindent 10 }}
+        {{- end }}
       nodeSelector:
         {{- toYaml .Values.nodeSelector | nindent 8 }}
       affinity:
         {{- toYaml .Values.affinity | nindent 8 }}
       tolerations:
         {{- toYaml .Values.tolerations | nindent 8 }}
       terminationGracePeriodSeconds: {{ .Values.terminationGracePeriodSeconds }}
+      {{- if .Values.extraVolumes }}
+      volumes:
+        {{- toYaml .Values.extraVolumes | nindent 8 }}
+      {{- end }}

charts/pulsar-resources-operator/tests/deployment_test.yaml

@@ -36,6 +36,10 @@ tests:
           path: spec.template.spec.containers[0].resources.requests
       - isNull:
           path: spec.template.spec.containers[0].resources.limits
+      - isNull:
+          path: spec.template.spec.containers[1].volumeMounts
+      - isNull:
+          path: spec.template.spec.volumes
 
   - it: should update the image version successfully
     set:

charts/pulsar-resources-operator/values.yaml

@@ -170,3 +170,6 @@ cloudStorage:
       sasToken: ""
       # -- Use account key for authentication (if false, will use SAS token)
       useAccountKey: true
+
+extraVolumeMounts: []
+extraVolumes: []