-
Notifications
You must be signed in to change notification settings - Fork 19
/
Copy pathdocker-compose.yaml
214 lines (207 loc) · 8.58 KB
/
docker-compose.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
---
version: "3"
services:
zookeeper:
image: confluentinc/cp-zookeeper:5.3.1
container_name: zookeeper
networks:
kafka:
aliases:
- zookeeper.local
environment:
ZOOKEEPER_SERVER_ID: 1
ZOOKEEPER_CLIENT_PORT: 22181
ZOOKEEPER_TICK_TIME: 2000
ZOOKEEPER_LOG4J_ROOT_LOGLEVEL: ERROR
ZOOKEEPER_LOG4J_LOGLEVEL: ERROR
volumes:
- zk-data:/var/lib/zookeeper/data
- zk-txn-logs:/var/lib/zookeeper/log
broker:
image: confluentinc/cp-enterprise-kafka:5.3.1
container_name: broker
networks:
kafka:
aliases:
- broker.local
depends_on:
- zookeeper
ports:
- "19092:19092"
environment:
KAFKA_LOG4J_ROOT_LOGLEVEL: ERROR
KAFKA_LOG4J_LOGLEVEL: ERROR
KAFKA_BROKER_ID: 1
KAFKA_ZOOKEEPER_CONNECT: zookeeper.local:22181
KAFKA_ADVERTISED_LISTENERS: SSL://broker.local:19092
KAFKA_SSL_KEYSTORE_FILENAME: kafka.broker.keystore.jks
KAFKA_SSL_KEYSTORE_CREDENTIALS: broker_keystore_creds
KAFKA_SSL_KEY_CREDENTIALS: broker_sslkey_creds
KAFKA_SSL_TRUSTSTORE_FILENAME: kafka.broker.truststore.jks
KAFKA_SSL_TRUSTSTORE_CREDENTIALS: broker_truststore_creds
KAFKA_SSL_ENDPOINT_IDENTIFICATION_ALGORITHM: " "
KAFKA_LISTENER_NAME_INTERNAL_SSL_ENDPOINT_IDENTIFICATION_ALGORITHM: " "
KAFKA_SSL_CLIENT_AUTH: requested
KAFKA_SECURITY_INTER_BROKER_PROTOCOL: SSL
KAFKA_OFFSETS_TOPIC_REPLICATION_FACTOR: 1
KAFKA_GROUP_INITIAL_REBALANCE_DELAY_MS: 0
KAFKA_METRIC_REPORTERS: io.confluent.metrics.reporter.ConfluentMetricsReporter
CONFLUENT_METRICS_REPORTER_BOOTSTRAP_SERVERS: broker.local:19092
CONFLUENT_METRICS_REPORTER_ZOOKEEPER_CONNECT: zookeeper.local:22181
CONFLUENT_METRICS_REPORTER_TOPIC_REPLICAS: 1
CONFLUENT_METRICS_REPORTER_SECURITY_PROTOCOL: SSL
CONFLUENT_METRICS_REPORTER_SSL_TRUSTSTORE_LOCATION: /etc/kafka/secrets/kafka.metrics.truststore.jks
CONFLUENT_METRICS_REPORTER_SSL_KEYSTORE_LOCATION: /etc/kafka/secrets/kafka.metrics.keystore.jks
CONFLUENT_METRICS_REPORTER_SSL_TRUSTSTORE_PASSWORD: awesomekafka
CONFLUENT_METRICS_REPORTER_SSL_KEYSTORE_PASSWORD: awesomekafka
CONFLUENT_METRICS_REPORTER_SSL_KEY_PASSWORD: awesomekafka
CONFLUENT_METRICS_ENABLE: "true"
CONFLUENT_SUPPORT_CUSTOMER_ID: anonymous
volumes:
- kafka-data:/var/lib/kafka/data
- ./secrets:/etc/kafka/secrets
schema-registry:
image: confluentinc/cp-schema-registry:5.3.1
depends_on:
- zookeeper
- broker
container_name: schema-registry
networks:
kafka:
aliases:
- schema-registry.local
ports:
- 8081:8081
environment:
SCHEMA_REGISTRY_KAFKASTORE_BOOTSTRAP_SERVERS: broker.local:19092
SCHEMA_REGISTRY_KAFKASTORE_SECURITY_PROTOCOL: SSL
SCHEMA_REGISTRY_HOST_NAME: schema-registry.local
SCHEMA_REGISTRY_LISTENERS: "https://schema-registry.local:8081"
SCHEMA_REGISTRY_SCHEMA_REGISTRY_INTER_INSTANCE_PROTOCOL: "https"
SCHEMA_REGISTRY_LOG4J_ROOT_LOGLEVEL: INFO
SCHEMA_REGISTRY_LOG4J_LOGLEVEL: ERROR
SCHEMA_REGISTRY_SSL_TRUSTSTORE_LOCATION: /etc/kafka/secrets/kafka.schema-registry.truststore.jks
SCHEMA_REGISTRY_SSL_KEYSTORE_LOCATION: /etc/kafka/secrets/kafka.schema-registry.keystore.jks
SCHEMA_REGISTRY_SSL_TRUSTSTORE_PASSWORD: awesomekafka
SCHEMA_REGISTRY_SSL_KEYSTORE_PASSWORD: awesomekafka
SCHEMA_REGISTRY_SSL_KEY_PASSWORD: awesomekafka
SCHEMA_REGISTRY_KAFKASTORE_SSL_ENDPOINT_IDENTIFICATION_ALGORITHM: "HTTPS"
SCHEMA_REGISTRY_KAFKASTORE_SSL_TRUSTSTORE_LOCATION: /etc/kafka/secrets/kafka.schema-registry.truststore.jks
SCHEMA_REGISTRY_KAFKASTORE_SSL_KEYSTORE_LOCATION: /etc/kafka/secrets/kafka.schema-registry.keystore.jks
SCHEMA_REGISTRY_KAFKASTORE_SSL_TRUSTSTORE_PASSWORD: awesomekafka
SCHEMA_REGISTRY_KAFKASTORE_SSL_KEYSTORE_PASSWORD: awesomekafka
SCHEMA_REGISTRY_KAFKASTORE_SSL_KEY_PASSWORD: awesomekafka
SCHEMA_REGISTRY_SSL_CLIENT_AUTH: "true"
volumes:
- ./secrets:/etc/kafka/secrets
control-center:
image: confluentinc/cp-enterprise-control-center:5.3.1
container_name: control-center
networks:
kafka:
aliases:
- control-center.local
depends_on:
- zookeeper
- broker
- schema-registry
ports:
- "9021:9021"
environment:
CONTROL_CENTER_LOG4J_ROOT_LOGLEVEL: INFO
CONTROL_CENTER_LOG4J_LOGLEVEL: INFO
CONTROL_CENTER_BOOTSTRAP_SERVERS: broker.local:19092
CONTROL_CENTER_ZOOKEEPER_CONNECT: zookeeper.local:22181
CONTROL_CENTER_SCHEMA_REGISTRY_URL: "https://schema-registry.local:8081"
CONTROL_CENTER_STREAMS_SECURITY_PROTOCOL: SSL
CONTROL_CENTER_SSL_ENDPOINT_IDENTIFICATION_ALGORITHM: ""
CONTROL_CENTER_STREAMS_SSL_TRUSTSTORE_LOCATION: /etc/kafka/secrets/kafka.control-center.truststore.jks
CONTROL_CENTER_STREAMS_SSL_KEYSTORE_LOCATION: /etc/kafka/secrets/kafka.control-center.keystore.jks
CONTROL_CENTER_STREAMS_SSL_TRUSTSTORE_PASSWORD: awesomekafka
CONTROL_CENTER_STREAMS_SSL_KEYSTORE_PASSWORD: awesomekafka
CONTROL_CENTER_STREAMS_SSL_KEY_PASSWORD: awesomekafka
CONTROL_CENTER_STREAMS_SSL_ENDPOINT_IDENTIFICATION_ALGORITHM: "HTTPS"
CONTROL_CENTER_REPLICATION_FACTOR: 1
CONTROL_CENTER_INTERNAL_TOPICS_PARTITIONS: 1
CONTROL_CENTER_MONITORING_INTERCEPTOR_TOPIC_PARTITIONS: 1
CONFLUENT_METRICS_TOPIC_REPLICATION: 1
CONTROL_CENTER_REST_LISTENERS: "http://0.0.0.0:9021"
CONTROL_CENTER_REST_SSL_TRUSTSTORE_LOCATION: /etc/kafka/secrets/kafka.control-center.truststore.jks
CONTROL_CENTER_REST_SSL_TRUSTSTORE_PASSWORD: awesomekafka
CONTROL_CENTER_REST_SSL_KEYSTORE_LOCATION: /etc/kafka/secrets/kafka.control-center.keystore.jks
CONTROL_CENTER_REST_SSL_KEYSTORE_PASSWORD: awesomekafka
CONTROL_CENTER_REST_SSL_KEY_PASSWORD: awesomekafka
CONTROL_CENTER_OPTS: -Djavax.net.ssl.trustStore=/etc/kafka/secrets/kafka.control-center.truststore.jks
-Djavax.net.ssl.trustStorePassword=kafka
-Djavax.net.ssl.keyStore=/etc/kafka/secrets/kafka.control-center.keystore.jks
-Djavax.net.ssl.keyStorePassword=kafka
PORT: 9021
volumes:
- ./secrets:/etc/kafka/secrets
kafka-tools:
build:
context: ./kafka-tools
depends_on:
- broker
container_name: kafka-tools
networks:
kafka:
aliases:
- kafka-tools.local
environment:
KAFKA_LOG4J_ROOT_LOGLEVEL: ERROR
KAFKA_SECURITY_PROTOCOL: SSL
KAFKA_SSL_ENDPOINT_IDENTIFICATION_ALGORITHM: " "
KAFKA_HEAP_OPTS: "-Xmx1G -Xms1G"
KAFKA_SSL_TRUSTSTORE_LOCATION: /etc/kafka/secrets/kafka.kafka-tools.truststore.jks
KAFKA_SSL_KEYSTORE_LOCATION: /etc/kafka/secrets/kafka.kafka-tools.keystore.jks
KAFKA_SSL_TRUSTSTORE_PASSWORD: awesomekafka
KAFKA_SSL_KEYSTORE_PASSWORD: awesomekafka
KAFKA_SSL_KEY_PASSWORD: awesomekafka
volumes:
- ./secrets:/etc/kafka/secrets
- ./config:/etc/kafka/config
rest-proxy:
image: confluentinc/cp-kafka-rest:5.3.1
depends_on:
- zookeeper
- broker
ports:
- 8082:8082
hostname: rest-proxy
container_name: rest-proxy
networks:
kafka:
aliases:
- rest-proxy.local
environment:
KAFKA_REST_LOG4J_ROOT_LOGLEVEL: ERROR
KAFKA_SSL_ENDPOINT_IDENTIFICATION_ALGORITHM: " "
KAFKA_REST_SSL_TRUSTSTORE_LOCATION: /etc/kafka/secrets/kafka.rest-proxy.truststore.jks
KAFKA_REST_SSL_KEYSTORE_LOCATION: /etc/kafka/secrets/kafka.rest-proxy.keystore.jks
KAFKA_REST_SSL_TRUSTSTORE_PASSWORD: awesomekafka
KAFKA_REST_SSL_KEYSTORE_PASSWORD: awesomekafka
KAFKA_REST_SSL_KEY_PASSWORD: awesomekafka
KAFKA_REST_LOG4J_LOGLEVEL: ERROR
KAFKA_REST_HOST_NAME: rest-proxy
KAFKA_REST_BOOTSTRAP_SERVERS: broker.local:19092
KAFKA_REST_ZOOKEEPER_CONNECT: zookeeper.local:22181
KAFKA_REST_CLIENT_SECURITY_PROTOCOL: SSL
KAFKA_REST_CLIENT_SSL_TRUSTSTORE_LOCATION: /etc/kafka/secrets/kafka.rest-proxy.truststore.jks
KAFKA_REST_CLIENT_SSL_TRUSTSTORE_PASSWORD: awesomekafka
KAFKA_REST_CLIENT_SSL_KEYSTORE_LOCATION: /etc/kafka/secrets/kafka.rest-proxy.keystore.jks
KAFKA_REST_CLIENT_SSL_KEYSTORE_PASSWORD: awesomekafka
KAFKA_REST_CLIENT_SSL_KEY_PASSWORD: awesomekafka
KAFKA_REST_LISTENERS: "http://0.0.0.0:8082"
KAFKA_HEAP_OPTS: "-Xmx1G -Xms1G"
volumes:
- ./secrets:/etc/kafka/secrets
volumes:
zk-data:
external: true
zk-txn-logs:
external: true
kafka-data:
external: true
networks:
kafka: