Following on from KafkaUser in another namespace you will also need to sync the kafka-cluster-cluster-ca-cert
too.
This is also straight forward and can be done with zero impact to existing services. The trick is to annotate the clusterCaCert
generation with the necessary details
In your Kafka
yaml add the following under kafka
template:
clusterCaCert:
metadata:
annotations:
reflector.v1.k8s.emberstack.com/reflection-allowed: "true"
reflector.v1.k8s.emberstack.com/reflection-allowed-namespaces: "fluent"
and create a secret to mirror it
apiVersion: v1
kind: Secret
metadata:
name: kafka-cluster-cluster-ca-cert
namespace: fluent
annotations:
reflector.v1.k8s.emberstack.com/reflects: "kafka/kafka-cluster-cluster-ca-cert"
type: Opaque
Once done this too will be mirrored and available for use.
Top comments (0)