Schema-Registry greift über abgesicherte Adresse zu
authorKai Moritz <kai@juplo.de>
Fri, 13 Oct 2023 12:16:49 +0000 (14:16 +0200)
committerKai Moritz <kai@juplo.de>
Mon, 16 Oct 2023 20:40:09 +0000 (22:40 +0200)
docker/docker-compose.yml

index bf9addd..1d3172b 100644 (file)
@@ -194,10 +194,17 @@ services:
   schema-registry:
     image: confluentinc/cp-schema-registry:7.5.1
     environment:
-      SCHEMA_REGISTRY_KAFKASTORE_BOOTSTRAP_SERVERS: kafka-1:9091,kafka-2:9091,kafka-3:9091
+      SCHEMA_REGISTRY_KAFKASTORE_BOOTSTRAP_SERVERS: kafka-1:9092,kafka-2:9092,kafka-3:9092
       SCHEMA_REGISTRY_HOST_NAME: schema-registry
       SCHEMA_REGISTRY_LISTENERS: http://0.0.0.0:8085
       SCHEMA_REGISTRY_LOG4J_ROOT_LOGLEVEL: INFO
+      SCHEMA_REGISTRY_KAFKASTORE_SECURITY_PROTOCOL: SASL_PLAINTEXT
+      SCHEMA_REGISTRY_KAFKASTORE_SASL_MECHANISM: PLAIN
+      SCHEMA_REGISTRY_KAFKASTORE_SASL_JAAS_CONFIG: >
+        org.apache.kafka.common.security.plain.PlainLoginModule
+        required
+        username="schemaregistry"
+        password="schemaregistry-secret";
     ports:
       - 8085:8085
     depends_on: