Skip to content

Latest commit

 

History

History
56 lines (42 loc) · 2.04 KB

README.md

File metadata and controls

56 lines (42 loc) · 2.04 KB
Raw

Pulsar Kerberos Setup

Before you setup

Assume I deploy all of them within same host

  • hostname as jeromex.pulsar.com
  • user id as jeromex
  • keytab location /tmp/jeromex.keytab
  • keytab principle jeromex/jeromex.pulsar.com@realm
  • ticket cache principle jeromex@realm
  • pulsar binary home /tmp/pulsar

Zookeeper

Change details please refer to commit

export OPTS="-Djava.security.auth.login.config=/tmp/pulsar/jaas/zookeeper_server_jaas.conf"
/tmp/pulsar/bin/pulsar zookeeper

Verify zookeeper SASL authentication

export OPTS="-Djava.security.auth.login.config=/tmp/pulsar/jaas/zookeeper_client_jaas.conf -Dzookeeper.sasl.client.username=jeromex"
/tmp/pulsar/bin/pulsar zookeeper-shell -server jeromex.pulsar.com:2181

Bookkeeper

Change details please refer to commit

export OPTS="-Djava.security.auth.login.config=/tmp/pulsar/jaas/bookie_jaas.conf -Dzookeeper.sasl.client.username=jeromex -Dbookkeeper.sasl.servicename=jeromex"
/tmp/pulsar/bin/bookkeeper shell metaformmat
/tmp/pulsar/bin/pulsar bookie

Broker

Change details please refer to commit

export OPTS="-Djava.security.auth.login.config=/tmp/pulsar/jaas/broker_jaas.conf -Dzookeeper.sasl.client.username=jeromex -Dbookkeeper.sasl.servicename=jeromex"
/tmp/pulsar/bin/pulsar broker

Create cluster, tenant, namespace

export OPTS="-Djava.security.auth.login.config=/tmp/pulsar/jaas/broker_jaas.conf -Dzookeeper.sasl.client.username=jeromex -Dbookkeeper.sasl.servicename=jeromex"
/tmp/pulsar/bin/pulsar-admin clusters create jeromex_cluster --url http://jeromex.pulsar.com:8080  --broker-url pulsar://jeromex.pulsar.com:6650
/tmp/pulsar/bin/pulsar-admin tenants create jeromex-tenant -r jeromex/jeromex.pulsar.com@realm,jeromex@realm -c jeromex_cluster
/tmp/pulsar/bin/pulsar-admin namespaces create jeromex-tenant/jeromex-namespace --clusters jeromex_cluster
export OPTS="-Djava.security.auth.login.config=/tmp/pulsar/jaas/client_jaas.conf"
/tmp/pulsar/bin/pulsar-client produce persistent://jeromex-tenant/jeromex-namespace --messages "hello pulsar"