|
1 | | ---- |
2 | | -version: "3.2" |
3 | 1 | services: |
4 | 2 | kafka1: |
5 | | - build: |
6 | | - context: . |
7 | | - dockerfile: Dockerfile.kafka |
8 | | - args: |
9 | | - broker_id: 1 |
10 | | - listener_host: kafka1 |
11 | | - listener_port: 9092 |
| 3 | + image: apache/kafka-native:3.8.0 |
| 4 | + volumes: |
| 5 | + - ./secrets:/etc/kafka/secrets |
12 | 6 | environment: |
13 | 7 | CLUSTER_ID: "MkU3OEVBNTcwNTJENDM2Qk" |
| 8 | + KAFKA_BROKER_ID: 1 |
| 9 | + KAFKA_NODE_ID: 1 |
| 10 | + KAFKA_OFFSETS_TOPIC_REPLICATION_FACTOR: 1 |
| 11 | + KAFKA_LOG4J_ROOT_LOGLEVEL: INFO |
| 12 | + KAFKA_LOG4J_LOGGERS: kafka.server.ClientQuotaManager=WARN |
| 13 | + |
| 14 | + KAFKA_CONTROLLER_QUORUM_VOTERS: "1@kafka1:9093" |
| 15 | + |
| 16 | + KAFKA_PROCESS_ROLES: broker,controller |
| 17 | + KAFKA_CONTROLLER_LISTENER_NAMES: CONTROLLER |
14 | 18 | KAFKA_LISTENERS: INTERNAL_SSL://kafka1:9090,EXTERNAL_SSL://kafka1:9092,CONTROLLER://kafka1:9093 |
| 19 | + KAFKA_ADVERTISED_LISTENERS: INTERNAL_SSL://kafka1:9090,EXTERNAL_SSL://localhost:9092 |
| 20 | + KAFKA_LISTENER_SECURITY_PROTOCOL_MAP: INTERNAL_SSL:SSL,EXTERNAL_SSL:SSL,CONTROLLER:PLAINTEXT |
| 21 | + KAFKA_INTER_BROKER_LISTENER_NAME: INTERNAL_SSL |
| 22 | + |
| 23 | + KAFKA_SSL_KEYSTORE_FILENAME: kafka.kafka1.keystore.jks |
| 24 | + KAFKA_SSL_KEYSTORE_CREDENTIALS: password |
| 25 | + KAFKA_SSL_TRUSTSTORE_FILENAME: kafka.truststore.jks |
| 26 | + KAFKA_SSL_TRUSTSTORE_CREDENTIALS: password |
| 27 | + KAFKA_SSL_KEY_CREDENTIALS: password |
| 28 | + KAFKA_SSL_CLIENT_AUTH: required |
| 29 | + KAFKA_SSL_ENDPOINT_IDENTIFICATION_ALGORITHM: "" |
| 30 | + KAFKA_LISTENER_NAME_INTERNAL_SSL_ENDPOINT_IDENTIFICATION_ALGORITHM: "" |
| 31 | + |
| 32 | + KAFKA_ALLOW_EVERYONE_IF_NO_ACL_FOUND: "true" |
| 33 | + KAFKA_AUTHORIZER_CLASS_NAME: org.apache.kafka.metadata.authorizer.StandardAuthorizer |
| 34 | + |
| 35 | + KAFKA_GROUP_INITIAL_REBALANCE_DELAY_MS: 0 |
| 36 | + KAFKA_TRANSACTION_STATE_LOG_MIN_ISR: 1 |
| 37 | + KAFKA_TRANSACTION_STATE_LOG_REPLICATION_FACTOR: 1 |
15 | 38 | ports: |
16 | 39 | - "9092:9092" |
17 | 40 | kafka2: |
18 | | - build: |
19 | | - context: . |
20 | | - dockerfile: Dockerfile.kafka |
21 | | - args: |
22 | | - broker_id: 2 |
23 | | - listener_host: kafka2 |
24 | | - listener_port: 9092 |
| 41 | + image: apache/kafka-native:3.8.0 |
| 42 | + volumes: |
| 43 | + - ./secrets:/etc/kafka/secrets |
25 | 44 | environment: |
26 | 45 | CLUSTER_ID: "MkU3OEVBNTcwNTJENDM2Qk" |
| 46 | + KAFKA_BROKER_ID: 2 |
| 47 | + KAFKA_NODE_ID: 2 |
| 48 | + KAFKA_OFFSETS_TOPIC_REPLICATION_FACTOR: 1 |
| 49 | + KAFKA_LOG4J_ROOT_LOGLEVEL: INFO |
| 50 | + KAFKA_LOG4J_LOGGERS: kafka.server.ClientQuotaManager=WARN |
| 51 | + |
| 52 | + KAFKA_CONTROLLER_QUORUM_VOTERS: "1@kafka1:9093" |
| 53 | + |
27 | 54 | KAFKA_PROCESS_ROLES: broker |
| 55 | + KAFKA_CONTROLLER_LISTENER_NAMES: CONTROLLER |
| 56 | + KAFKA_LISTENERS: INTERNAL_SSL://kafka2:9090,EXTERNAL_SSL://kafka2:9092 |
| 57 | + KAFKA_ADVERTISED_LISTENERS: INTERNAL_SSL://kafka2:9090,EXTERNAL_SSL://localhost:9093 |
| 58 | + KAFKA_LISTENER_SECURITY_PROTOCOL_MAP: INTERNAL_SSL:SSL,EXTERNAL_SSL:SSL,CONTROLLER:PLAINTEXT |
| 59 | + KAFKA_INTER_BROKER_LISTENER_NAME: INTERNAL_SSL |
| 60 | + |
| 61 | + KAFKA_SSL_KEYSTORE_FILENAME: kafka.kafka2.keystore.jks |
| 62 | + KAFKA_SSL_KEYSTORE_CREDENTIALS: password |
| 63 | + KAFKA_SSL_TRUSTSTORE_FILENAME: kafka.truststore.jks |
| 64 | + KAFKA_SSL_TRUSTSTORE_CREDENTIALS: password |
| 65 | + KAFKA_SSL_KEY_CREDENTIALS: password |
| 66 | + KAFKA_SSL_CLIENT_AUTH: required |
| 67 | + KAFKA_SSL_ENDPOINT_IDENTIFICATION_ALGORITHM: "" |
| 68 | + KAFKA_LISTENER_NAME_INTERNAL_SSL_ENDPOINT_IDENTIFICATION_ALGORITHM: "" |
| 69 | + |
| 70 | + KAFKA_ALLOW_EVERYONE_IF_NO_ACL_FOUND: "true" |
| 71 | + KAFKA_AUTHORIZER_CLASS_NAME: org.apache.kafka.metadata.authorizer.StandardAuthorizer |
| 72 | + |
| 73 | + KAFKA_GROUP_INITIAL_REBALANCE_DELAY_MS: 0 |
| 74 | + KAFKA_TRANSACTION_STATE_LOG_MIN_ISR: 1 |
| 75 | + KAFKA_TRANSACTION_STATE_LOG_REPLICATION_FACTOR: 1 |
| 76 | + ports: |
| 77 | + - "9093:9092" |
28 | 78 | kafka3: |
29 | | - build: |
30 | | - context: . |
31 | | - dockerfile: Dockerfile.kafka |
32 | | - args: |
33 | | - broker_id: 3 |
34 | | - listener_host: kafka3 |
35 | | - listener_port: 9092 |
| 79 | + image: apache/kafka-native:3.8.0 |
| 80 | + volumes: |
| 81 | + - ./secrets:/etc/kafka/secrets |
36 | 82 | environment: |
37 | 83 | CLUSTER_ID: "MkU3OEVBNTcwNTJENDM2Qk" |
| 84 | + KAFKA_BROKER_ID: 3 |
| 85 | + KAFKA_NODE_ID: 3 |
| 86 | + KAFKA_OFFSETS_TOPIC_REPLICATION_FACTOR: 1 |
| 87 | + KAFKA_LOG4J_ROOT_LOGLEVEL: INFO |
| 88 | + KAFKA_LOG4J_LOGGERS: kafka.server.ClientQuotaManager=WARN |
| 89 | + |
| 90 | + KAFKA_CONTROLLER_QUORUM_VOTERS: "1@kafka1:9093" |
| 91 | + |
38 | 92 | KAFKA_PROCESS_ROLES: broker |
| 93 | + KAFKA_CONTROLLER_LISTENER_NAMES: CONTROLLER |
| 94 | + KAFKA_LISTENERS: INTERNAL_SSL://kafka3:9090,EXTERNAL_SSL://kafka3:9092 |
| 95 | + KAFKA_ADVERTISED_LISTENERS: INTERNAL_SSL://kafka3:9090,EXTERNAL_SSL://localhost:9094 |
| 96 | + KAFKA_LISTENER_SECURITY_PROTOCOL_MAP: INTERNAL_SSL:SSL,EXTERNAL_SSL:SSL,CONTROLLER:PLAINTEXT |
| 97 | + KAFKA_INTER_BROKER_LISTENER_NAME: INTERNAL_SSL |
| 98 | + |
| 99 | + KAFKA_SSL_KEYSTORE_FILENAME: kafka.kafka3.keystore.jks |
| 100 | + KAFKA_SSL_KEYSTORE_CREDENTIALS: password |
| 101 | + KAFKA_SSL_TRUSTSTORE_FILENAME: kafka.truststore.jks |
| 102 | + KAFKA_SSL_TRUSTSTORE_CREDENTIALS: password |
| 103 | + KAFKA_SSL_KEY_CREDENTIALS: password |
| 104 | + KAFKA_SSL_CLIENT_AUTH: required |
| 105 | + KAFKA_SSL_ENDPOINT_IDENTIFICATION_ALGORITHM: "" |
| 106 | + |
| 107 | + KAFKA_LISTENER_NAME_INTERNAL_SSL_ENDPOINT_IDENTIFICATION_ALGORITHM: "" |
| 108 | + KAFKA_ALLOW_EVERYONE_IF_NO_ACL_FOUND: "true" |
| 109 | + KAFKA_AUTHORIZER_CLASS_NAME: org.apache.kafka.metadata.authorizer.StandardAuthorizer |
| 110 | + |
| 111 | + KAFKA_GROUP_INITIAL_REBALANCE_DELAY_MS: 0 |
| 112 | + KAFKA_TRANSACTION_STATE_LOG_MIN_ISR: 1 |
| 113 | + KAFKA_TRANSACTION_STATE_LOG_REPLICATION_FACTOR: 1 |
| 114 | + ports: |
| 115 | + - "9094:9092" |
0 commit comments