Strimzi
Try to produce a message through an ingress from outside the cluster #7857
Unanswered
JeromeFroment
asked this question in
Q&A
Replies: 1 comment 3 replies
-
|
It is a bit hard to say what is wrong without knowing what the environment looks like in detail.
|
Beta Was this translation helpful? Give feedback.
3 replies
-
|
Thanks for your reply and sorry for the missing information: EnvironmentI am currently working on a cluster (k8s v1.21.12) hosted on a private server. I have deployed an ingress controler that exposes my ingresses through the address About the brokers that are resolved in Here are the yml generated from the ingresses: broker-0 apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
name: clusterka-kafka-0
namespace: kafka
uid: 7f7dad33-1062-4fbb-9a1e-21ae65495810
resourceVersion: '246706'
generation: 1
creationTimestamp: '2022-12-23T15:30:56Z'
labels:
app: clusterka
app.kubernetes.io/instance: clusterka
app.kubernetes.io/managed-by: strimzi-cluster-operator
app.kubernetes.io/name: kafka
app.kubernetes.io/part-of: strimzi-clusterka
strimzi.io/cluster: clusterka
strimzi.io/kind: Kafka
strimzi.io/name: clusterka-kafka
annotations:
ingress.kubernetes.io/ssl-passthrough: 'true'
nginx.ingress.kubernetes.io/backend-protocol: HTTPS
nginx.ingress.kubernetes.io/ssl-passthrough: 'true'
ownerReferences:
- apiVersion: kafka.strimzi.io/v1beta2
kind: Kafka
name: clusterka
uid: def4a93d-a5f5-4dc1-b150-e84bf0a2edf9
controller: false
blockOwnerDeletion: false
managedFields:
- manager: okhttp
operation: Update
apiVersion: networking.k8s.io/v1
time: '2022-12-23T15:30:56Z'
fieldsType: FieldsV1
fieldsV1:
f:metadata:
f:annotations:
.: {}
f:ingress.kubernetes.io/ssl-passthrough: {}
f:nginx.ingress.kubernetes.io/backend-protocol: {}
f:nginx.ingress.kubernetes.io/ssl-passthrough: {}
f:labels:
.: {}
f:app: {}
f:app.kubernetes.io/instance: {}
f:app.kubernetes.io/managed-by: {}
f:app.kubernetes.io/name: {}
f:app.kubernetes.io/part-of: {}
f:strimzi.io/cluster: {}
f:strimzi.io/kind: {}
f:strimzi.io/name: {}
f:ownerReferences:
.: {}
k:{"uid":"def4a93d-a5f5-4dc1-b150-e84bf0a2edf9"}:
.: {}
f:apiVersion: {}
f:blockOwnerDeletion: {}
f:controller: {}
f:kind: {}
f:name: {}
f:uid: {}
f:spec:
f:ingressClassName: {}
f:rules: {}
f:tls: {}
- manager: nginx-ingress-controller
operation: Update
apiVersion: networking.k8s.io/v1
time: '2022-12-23T15:31:12Z'
fieldsType: FieldsV1
fieldsV1:
f:status:
f:loadBalancer:
f:ingress: {}
selfLink: /apis/networking.k8s.io/v1/namespaces/kafka/ingresses/clusterka-kafka-0
status:
loadBalancer:
ingress:
- ip: 172.23.0.2
spec:
ingressClassName: nginx
tls:
- hosts:
- broker-0.local.sandbox.com
rules:
- host: broker-0.local.sandbox.com
http:
paths:
- path: /
pathType: Prefix
backend:
service:
name: clusterka-kafka-0
port:
number: 9094broker-1 apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
name: clusterka-kafka-1
namespace: kafka
uid: 3f4e76e6-3430-44ed-a1d5-045e77c58a14
resourceVersion: '246704'
generation: 1
creationTimestamp: '2022-12-23T15:30:56Z'
labels:
app: clusterka
app.kubernetes.io/instance: clusterka
app.kubernetes.io/managed-by: strimzi-cluster-operator
app.kubernetes.io/name: kafka
app.kubernetes.io/part-of: strimzi-clusterka
strimzi.io/cluster: clusterka
strimzi.io/kind: Kafka
strimzi.io/name: clusterka-kafka
annotations:
ingress.kubernetes.io/ssl-passthrough: 'true'
nginx.ingress.kubernetes.io/backend-protocol: HTTPS
nginx.ingress.kubernetes.io/ssl-passthrough: 'true'
ownerReferences:
- apiVersion: kafka.strimzi.io/v1beta2
kind: Kafka
name: clusterka
uid: def4a93d-a5f5-4dc1-b150-e84bf0a2edf9
controller: false
blockOwnerDeletion: false
managedFields:
- manager: okhttp
operation: Update
apiVersion: networking.k8s.io/v1
time: '2022-12-23T15:30:56Z'
fieldsType: FieldsV1
fieldsV1:
f:metadata:
f:annotations:
.: {}
f:ingress.kubernetes.io/ssl-passthrough: {}
f:nginx.ingress.kubernetes.io/backend-protocol: {}
f:nginx.ingress.kubernetes.io/ssl-passthrough: {}
f:labels:
.: {}
f:app: {}
f:app.kubernetes.io/instance: {}
f:app.kubernetes.io/managed-by: {}
f:app.kubernetes.io/name: {}
f:app.kubernetes.io/part-of: {}
f:strimzi.io/cluster: {}
f:strimzi.io/kind: {}
f:strimzi.io/name: {}
f:ownerReferences:
.: {}
k:{"uid":"def4a93d-a5f5-4dc1-b150-e84bf0a2edf9"}:
.: {}
f:apiVersion: {}
f:blockOwnerDeletion: {}
f:controller: {}
f:kind: {}
f:name: {}
f:uid: {}
f:spec:
f:ingressClassName: {}
f:rules: {}
f:tls: {}
- manager: nginx-ingress-controller
operation: Update
apiVersion: networking.k8s.io/v1
time: '2022-12-23T15:31:12Z'
fieldsType: FieldsV1
fieldsV1:
f:status:
f:loadBalancer:
f:ingress: {}
selfLink: /apis/networking.k8s.io/v1/namespaces/kafka/ingresses/clusterka-kafka-1
status:
loadBalancer:
ingress:
- ip: 172.23.0.2
spec:
ingressClassName: nginx
tls:
- hosts:
- broker-1.local.sandbox.com
rules:
- host: broker-1.local.sandbox.com
http:
paths:
- path: /
pathType: Prefix
backend:
service:
name: clusterka-kafka-1
port:
number: 9094
bootstrap apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
name: clusterka-kafka-bootstrap
namespace: kafka
uid: a0dba259-ac39-4d8a-a590-df8efe52c6b0
resourceVersion: '246705'
generation: 1
creationTimestamp: '2022-12-23T15:30:56Z'
labels:
app: clusterka
app.kubernetes.io/instance: clusterka
app.kubernetes.io/managed-by: strimzi-cluster-operator
app.kubernetes.io/name: kafka
app.kubernetes.io/part-of: strimzi-clusterka
strimzi.io/cluster: clusterka
strimzi.io/kind: Kafka
strimzi.io/name: clusterka-kafka
annotations:
ingress.kubernetes.io/ssl-passthrough: 'true'
nginx.ingress.kubernetes.io/backend-protocol: HTTPS
nginx.ingress.kubernetes.io/ssl-passthrough: 'true'
ownerReferences:
- apiVersion: kafka.strimzi.io/v1beta2
kind: Kafka
name: clusterka
uid: def4a93d-a5f5-4dc1-b150-e84bf0a2edf9
controller: false
blockOwnerDeletion: false
managedFields:
- manager: okhttp
operation: Update
apiVersion: networking.k8s.io/v1
time: '2022-12-23T15:30:56Z'
fieldsType: FieldsV1
fieldsV1:
f:metadata:
f:annotations:
.: {}
f:ingress.kubernetes.io/ssl-passthrough: {}
f:nginx.ingress.kubernetes.io/backend-protocol: {}
f:nginx.ingress.kubernetes.io/ssl-passthrough: {}
f:labels:
.: {}
f:app: {}
f:app.kubernetes.io/instance: {}
f:app.kubernetes.io/managed-by: {}
f:app.kubernetes.io/name: {}
f:app.kubernetes.io/part-of: {}
f:strimzi.io/cluster: {}
f:strimzi.io/kind: {}
f:strimzi.io/name: {}
f:ownerReferences:
.: {}
k:{"uid":"def4a93d-a5f5-4dc1-b150-e84bf0a2edf9"}:
.: {}
f:apiVersion: {}
f:blockOwnerDeletion: {}
f:controller: {}
f:kind: {}
f:name: {}
f:uid: {}
f:spec:
f:ingressClassName: {}
f:rules: {}
f:tls: {}
- manager: nginx-ingress-controller
operation: Update
apiVersion: networking.k8s.io/v1
time: '2022-12-23T15:31:12Z'
fieldsType: FieldsV1
fieldsV1:
f:status:
f:loadBalancer:
f:ingress: {}
selfLink: >-
/apis/networking.k8s.io/v1/namespaces/kafka/ingresses/clusterka-kafka-bootstrap
status:
loadBalancer:
ingress:
- ip: 172.23.0.2
spec:
ingressClassName: nginx
tls:
- hosts:
- streaming-api.local.sandbox.com
rules:
- host: streaming-api.local.sandbox.com
http:
paths:
- path: /
pathType: Prefix
backend:
service:
name: clusterka-kafka-external-bootstrap
port:
number: 9094
Here the kafka custom resource with the status section: apiVersion: kafka.strimzi.io/v1beta2
kind: Kafka
metadata:
annotations:
argocd.argoproj.io/sync-wave: '2'
kubectl.kubernetes.io/last-applied-configuration: >
{"apiVersion":"kafka.strimzi.io/v1beta2","kind":"Kafka","metadata":{"annotations":{"argocd.argoproj.io/sync-wave":"2"},"labels":{"app":"clusterka"},"name":"clusterka","namespace":"kafka"},"spec":{"entityOperator":{"topicOperator":{},"userOperator":{"logging":{"loggers":{"rootLogger.level":"INFO"},"type":"inline"},"reconciliationIntervalSeconds":60,"resources":{"limits":{"cpu":"1","memory":"512Mi"},"requests":{"cpu":"1","memory":"512Mi"}},"watchedNamespace":"kafka"}},"kafka":{"authorization":{"type":"simple"},"config":{"log.message.format.version":"2.8","offsets.topic.replication.factor":1,"transaction.state.log.min.isr":1,"transaction.state.log.replication.factor":1},"jvmOptions":{"-Xms":"1024m","-Xmx":"1024m"},"listeners":[{"name":"plain","port":9092,"tls":false,"type":"internal"},{"authentication":{"type":"tls"},"name":"tls","port":9093,"tls":true,"type":"internal"},{"authentication":{"type":"tls"},"configuration":{"bootstrap":{"host":"streaming-api.local.sandbox.com"},"brokers":[{"broker":0,"host":"broker-0.local.sandbox.com"},{"broker":1,"host":"broker-1.local.sandbox.com"}],"class":"nginx"},"name":"external","port":9094,"tls":true,"type":"ingress"}],"replicas":2,"resources":{"limits":{"cpu":1,"memory":"1Gi"},"requests":{"cpu":0.1,"memory":"100Mi"}},"storage":{"type":"jbod","volumes":[{"class":"local-path","deleteClaim":false,"id":0,"size":"1Gi","type":"persistent-claim"}]},"version":"2.8.0"},"zookeeper":{"logging":{"loggers":{"zookeeper.root.logger":"INFO"},"type":"inline"},"replicas":1,"resources":{"limits":{"cpu":1,"memory":"1Gi"},"requests":{"cpu":0.1,"memory":"100Mi"}},"storage":{"deleteClaim":false,"size":"1Gi","type":"persistent-claim"}}}}
creationTimestamp: '2022-12-22T15:11:08Z'
generation: 9
labels:
app: clusterka
managedFields:
- apiVersion: kafka.strimzi.io/v1beta2
fieldsType: FieldsV1
fieldsV1:
f:metadata:
f:annotations:
.: {}
f:argocd.argoproj.io/sync-wave: {}
f:kubectl.kubernetes.io/last-applied-configuration: {}
f:labels:
.: {}
f:app: {}
f:spec:
.: {}
f:entityOperator:
.: {}
f:topicOperator: {}
f:userOperator:
.: {}
f:logging:
.: {}
f:loggers:
.: {}
f:rootLogger.level: {}
f:type: {}
f:reconciliationIntervalSeconds: {}
f:resources:
.: {}
f:limits:
.: {}
f:cpu: {}
f:memory: {}
f:requests:
.: {}
f:cpu: {}
f:memory: {}
f:watchedNamespace: {}
f:kafka:
.: {}
f:authorization:
.: {}
f:type: {}
f:config:
.: {}
f:log.message.format.version: {}
f:offsets.topic.replication.factor: {}
f:transaction.state.log.min.isr: {}
f:transaction.state.log.replication.factor: {}
f:jvmOptions:
.: {}
f:-Xms: {}
f:-Xmx: {}
f:listeners: {}
f:replicas: {}
f:resources:
.: {}
f:limits:
.: {}
f:cpu: {}
f:memory: {}
f:requests:
.: {}
f:cpu: {}
f:memory: {}
f:storage:
.: {}
f:type: {}
f:volumes: {}
f:version: {}
f:zookeeper:
.: {}
f:logging:
.: {}
f:loggers:
.: {}
f:zookeeper.root.logger: {}
f:type: {}
f:replicas: {}
f:resources:
.: {}
f:limits:
.: {}
f:cpu: {}
f:memory: {}
f:requests:
.: {}
f:cpu: {}
f:memory: {}
f:storage:
.: {}
f:deleteClaim: {}
f:size: {}
f:type: {}
manager: kubectl-client-side-apply
operation: Update
time: '2022-12-22T15:11:08Z'
- apiVersion: kafka.strimzi.io/v1beta2
fieldsType: FieldsV1
fieldsV1:
f:status:
.: {}
f:clusterId: {}
f:conditions: {}
f:listeners: {}
f:observedGeneration: {}
manager: okhttp
operation: Update
time: '2022-12-23T14:28:28Z'
name: clusterka
namespace: kafka
resourceVersion: '246852'
uid: def4a93d-a5f5-4dc1-b150-e84bf0a2edf9
selfLink: /apis/kafka.strimzi.io/v1beta2/namespaces/kafka/kafkas/clusterka
status:
clusterId: mvkfXoJLSxW-UTfIjEMsPw
conditions:
- lastTransitionTime: '2022-12-23T15:32:16.712Z'
status: 'True'
type: Ready
listeners:
- addresses:
- host: clusterka-kafka-bootstrap.kafka.svc
port: 9092
bootstrapServers: clusterka-kafka-bootstrap.kafka.svc:9092
type: plain
- addresses:
- host: clusterka-kafka-bootstrap.kafka.svc
port: 9093
bootstrapServers: clusterka-kafka-bootstrap.kafka.svc:9093
certificates:
- |
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
type: tls
- addresses:
- host: streaming-api.local.sandbox.com
port: 443
bootstrapServers: streaming-api.local.sandbox.com:443
certificates:
- |
-----BEGIN CERTIFICATE-----
MIIFLTCCAxWgAwIBAgIUWbWi54+e51cTN7bonI+u4AiQ10wwDQYJKoZIhvcNAQEN
BQAwLTETMBEGA1UECgwKaW8uc3RyaW16aTEWMBQGA1UEAwwNY2x1c3Rlci1jYSB2
MDAeFw0yMjEyMjIxNTExMTFaFw0yMzEyMjIxNTExMTFaMC0xEzARBgNVBAoMCmlv
LnN0cmltemkxFjAUBgNVBAMMDWNsdXN0ZXItY2EgdjAwggIiMA0GCSqGSIb3DQEB
AQUAA4ICDwAwggIKAoICAQDzUVzSwwJY4vKPj8CxlXPZovMxJwMITPv9dibahKXW
lItFOiNFvSNqsWhR/q+zwZ7G9zRlkGtl/02+YlSeln+5MQioafswYsEZm8ho1YGm
PaDuYaFW45a+afWkvThU7AeuP2KKNROamU6JkhrexzU0gwXOlln9ekrfhXMjE+ch
RlJ9fsH3yaWAvmrnArH+7oWm1Wn5SZRUGs3od4DzQwnX8Yrx0RrSegRyDGq1D4W6
uOL8hBUvaVCrzaTM/wnU2bVsdbI66YaTpnit5/Neh1JxC/Ks3ORTZo4V+EfXpwMI
pza7W5Zezrm9hmszrcqMbEcMLThXjBDxXDDC7C7Hdxe38B1vH3WveKKLTq+wZYdD
J4pRJ2sQBhbssNyvWXpR60j1D6KxQuy8c9lBQbP6e53edmzWl+RdED9RtxobK+DO
FQjnvBLPeIFcTqlaaNQU7FCoKSthbm/V5gJkJXeVnZDljG15eTbvInGvffcwnAkA
waioyMVQJOwM91+g9srZHR88l0cZEOn0A56dRiOC3gtzarMtlbqffhpjy9goVi6D
OXwSttr9cMoKnTeRpD61vIQO9455BcKwlhgyC3ZIbUItkdH3iUXdXtvjjTfkxJfr
Q+Jbh+WmP9wps9k2bYK2LJlTJrkFc9z57xegUvEJH13uF7lca1NUhUZwsepVLwYS
wwIDAQABo0UwQzAdBgNVHQ4EFgQUa2fxrQsL3euCdcRfVhRwsg5wq7EwEgYDVR0T
AQH/BAgwBgEB/wIBADAOBgNVHQ8BAf8EBAMCAQYwDQYJKoZIhvcNAQENBQADggIB
AItDs9IERDztWZ43CKiEpi4cG0rA7Y3gIv/pWfSpXvMGN3iodSF4eEdKivBgApLG
Ho5X+Z031HKE1i0E871V2waDppjaXHC/uwrXbQUb0Kuk+Lm5dhCK2+RpvP4volta
uD0b8BYXHTjOKTi1ry4fgh5vEk7rf2CmrXwnAq4u3Tm9P+3nd/8PgbqGSAaA6TEt
vtI0smw8X6MWeV15eQddfxjGNd97ZV41GWbHAH2qGON1tWFQj2B720YWO7KelcV1
G9yEARELimTAB2FU5h/ur7gOtUc1EVR8GMnqH5DWL+a1wm3Tf0OY/TAoGM5g1j2Q
2REs9/bh8/KQIylYGezG7yHagrlE+P90gS0o2X1Y13nF/fODzzf8Yn1sDphLvMNk
1O2j8EHhvAw2gLSMYKQv5QEuG8z6C38jN4tRRgVMuR4pgzWN48sNCX18wm1Yjh7C
e90IJRj2wUvjY9ZBoHuDAlU6vfWWeAPFk+mOtKHvgX9M1uDBq0/ep92zIjbNKWRE
NX8ME4u+AeHXFWD6fibu+832BPAyV0xi59+QejWh9IlUbEdGtnSZIau5n/REhyDN
vSsO/8lejSMUnnHhh+xFMIajs2s8CBp/1K2YxslVm3+zXY7R/VUJ0BslsA8mlx3S
hn0ir812+AIzOQ1fHqUn7aIqScYLjDWJ4DRJaDDhv2tx
-----END CERTIFICATE-----
type: external
observedGeneration: 9
spec:
entityOperator:
topicOperator: {}
userOperator:
logging:
loggers:
rootLogger.level: INFO
type: inline
reconciliationIntervalSeconds: 60
resources:
limits:
cpu: '1'
memory: 512Mi
requests:
cpu: '1'
memory: 512Mi
watchedNamespace: kafka
kafka:
authorization:
type: simple
config:
log.message.format.version: '2.8'
offsets.topic.replication.factor: 1
transaction.state.log.min.isr: 1
transaction.state.log.replication.factor: 1
jvmOptions:
'-Xms': 1024m
'-Xmx': 1024m
listeners:
- name: plain
port: 9092
tls: false
type: internal
- authentication:
type: tls
name: tls
port: 9093
tls: true
type: internal
- authentication:
type: tls
configuration:
bootstrap:
host: streaming-api.local.sandbox.com
brokers:
- broker: 0
host: broker-0.local.sandbox.com
- broker: 1
host: broker-1.local.sandbox.com
class: nginx
name: external
port: 9094
tls: true
type: ingress
replicas: 2
resources:
limits:
cpu: 1
memory: 1Gi
requests:
cpu: 0.1
memory: 100Mi
storage:
type: jbod
volumes:
- class: local-path
deleteClaim: false
id: 0
size: 1Gi
type: persistent-claim
version: 2.8.0
zookeeper:
logging:
loggers:
zookeeper.root.logger: INFO
type: inline
replicas: 1
resources:
limits:
cpu: 1
memory: 1Gi
requests:
cpu: 0.1
memory: 100Mi
storage:
deleteClaim: false
size: 1Gi
type: persistent-claim
I just noticed that the type of my external listener is equal to "external" unlike my internal listener where the type = "tls". Kafka-operator logs: I tried to fix it but my listener seems to be well configured in my file (see my previous message for the complete file) if we compare it to the documentation. My version listeners:
- name: plain
port: 9092
type: internal
tls: false
- name: tls
port: 9093
type: internal
tls: true
authentication:
type: tls
- name: external
port: 9094
type: ingress
tls: true
authentication:
type: tls
configuration:
class: nginx
bootstrap:
host: streaming-api.local.sandbox.com
brokers:
- broker: 0
host: broker-0.local.sandbox.com
- broker: 1
host: broker-1.local.sandbox.comDocumentation (https://strimzi.io/docs/operators/in-development/configuring.html#proc-accessing-kafka-using-ingress-str) apiVersion: kafka.strimzi.io/v1beta2
kind: Kafka
spec:
kafka:
# ...
listeners:
- name: external
port: 9094
type: ingress
tls: true
authentication:
type: tls
configuration: (1)
bootstrap:
host: bootstrap.myingress.com
brokers:
- broker: 0
host: broker-0.myingress.com
- broker: 1
host: broker-1.myingress.com
- broker: 2
host: broker-2.myingress.com
# ...
zookeeper:
# ... |
Beta Was this translation helpful? Give feedback.
-
|
The resources look all good. So I think there should not be a problem there 🤔 On the beginning you said you get this error: The way I read it is that it connects fine to the bootstrap address and finds the addresses of the individual brokers. But it seems to resolve them to
The Ingress listener is required to use TLS passthrough because Kafka connections are not HTTP. So in the listener configuration, the listeners:
- name: external
port: 9094
type: ingress
tls: true <=========== THIS ONE
authentication:
type: tls
configuration: (1)
bootstrap:
host: bootstrap.myingress.com
brokers:
- broker: 0
host: broker-0.myingress.com
- broker: 1
host: broker-1.myingress.com
- broker: 2
host: broker-2.myingress.com
# ...Otherwise it would not work (Unlike |
Beta Was this translation helpful? Give feedback.
-
|
Alright, I'll look for the address resolution and let you know what I find. Thanks ! |
Beta Was this translation helpful? Give feedback.
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
Uh oh!
There was an error while loading. Please reload this page.
-
Hello,
I am trying to produce a message through an ingress from outside the cluster but I get this error:
(no logs in kafka server)
Versions
With my kafka.yml:
I get the following services:
clusterka-kafka-external-bootstrap.yml
I get the following ingresses:
clusterka-kafka-bootstrap.yml
I get the following pods:
clusterka-kafka-0.yml
Additional tests
Change the service (backend) pointed by the generated ingress (ingress: clusterka-kafka-bootstrap)
Original configuration:
New configuration:
Results
It works
Go through the internal listener
It works
Ingress (without certificate) created by me and which exposes the service clusterka-kafka-bootstrap:9093 (internal listener)
But it is another issue
Thank you in advance for your help! I remain at your disposal for any further information
Beta Was this translation helpful? Give feedback.
All reactions