AllardDCS/kubernetes
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

eindelijk weer eens een push

Browse Source
This commit is contained in:
allard
2026-05-31 16:07:30 +02:00
parent 01cff8e165
commit ff21c258e0
2747 changed files with 302316 additions and 131101 deletions
Download Patch File Download Diff File Expand all files Collapse all files
prod/kafka/README.md
+9
View File
@@ -0,0 +1,9 @@
nodeport installeren en dan met scriptjes Topics en Messages maken.
Vergeet niet de nodeport in de scriptjes aan te passen!
Als kafka crashed omdat zooeeper een andere cluster id heeft:
kubectl exec -n kafka deploy/kafka-deployment -- rm /tmp/kafka-logs/meta.properties
kubectl rollout restart deployment/kafka-deployment -n kafka
prod/kafka/catalog-info.yaml
+19
View File
@@ -0,0 +1,19 @@
apiVersion: backstage.io/v1alpha1
kind: Component
metadata:
name: dev-kafka
title: Kafka (dev)
description: Kafka instance running in Kubernetes
annotations:
backstage.io/kubernetes-label-selector: "app=kafka"
links:
- url: https://github.com/AllardKrings/kubernetes/dev/kafka
title: itop-configuration
docs:
- url: ./README.md
spec:
type: service
lifecycle: production
owner: group:default/allarddcs
subcomponentOf: component:default/DEV-cluster
prod/kafka/helm/values.yaml
+2401
View File
File diff suppressed because it is too large Load Diff
prod/kafka/ingressroute-tls.yml
+16
View File
@@ -0,0 +1,16 @@
apiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
name: kafka-tls
namespace: kafka
spec:
entryPoints:
- websecure
routes:
- match: Host(`kafka-ui-prod.allarddcs.nl`)
kind: Rule
services:
- name: kafka-ui
port: 8080
tls:
certResolver: letsencrypt
prod/kafka/kafka.yaml
+154
View File
@@ -0,0 +1,154 @@
apiVersion: v1
kind: Service
metadata:
name: kafka-service
namespace: kafka
labels:
app: kafka
spec:
ports:
- port: 9092
selector:
app: kafka
---
apiVersion: apps/v1
kind: Deployment
metadata:
name: kafka-deployment
namespace: kafka
spec:
replicas: 1
selector:
matchLabels:
app: kafka
template:
metadata:
labels:
app: kafka
spec:
containers:
- name: kafka
image: ubuntu/kafka:edge
env:
- name: ZOOKEEPER_HOST
value: zookeeper-service
- name: KAFKA_OPTS
value: "-Ddelete.topic.enable=true"
args: ["/etc/kafka/server.properties", "--override", "advertised.listeners=PLAINTEXT://kafka-service:9092"]
ports:
- containerPort: 9092
name: kafka
protocol: TCP
volumeMounts:
- mountPath: /tmp/kafka-logs
name: kafka
subPath: data
- mountPath: /etc/kafka/server.properties
name: kafka
subPath: conf/server.properties
volumes:
- name: kafka
persistentVolumeClaim:
claimName: kafka-pvc
---
apiVersion: apps/v1
kind: Deployment
metadata:
name: kafka-ui
namespace: kafka
labels:
app: kafka-ui
spec:
replicas: 1
selector:
matchLabels:
app: kafka-ui
template:
metadata:
labels:
app: kafka-ui
spec:
containers:
- name: kafka-ui
image: provectuslabs/kafka-ui
ports:
- containerPort: 8080
env:
- name: KAFKA_CLUSTERS_0_NAME
value: "kafka-service"
- name: KAFKA_CLUSTERS_0_BOOTSTRAPSERVERS
value: "kafka-service:9092"
---
apiVersion: v1
kind: Service
metadata:
name: kafka-ui
namespace: kafka
labels:
name: kafka-ui
spec:
type: NodePort
ports:
- port: 8080
nodePort: 31890
name: http
selector:
app: kafka-ui
---
apiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
name: kafka-ui-tls-allarddcs
namespace: kafka
spec:
entryPoints:
- websecure
routes:
- match: Host(`kafka-prod.allarddcs.nl`)
kind: Rule
services:
- name: kafka-ui
port: 8080
tls:
certResolver: letsencrypt
---
apiVersion: v1
kind: PersistentVolume
metadata:
name: kafka-pv
spec:
storageClassName: ""
capacity:
storage: 1Gi
accessModes:
- ReadWriteMany
persistentVolumeReclaimPolicy: Retain
mountOptions:
- hard
- nfsvers=4.1
nfs:
server: 192.168.2.111
path: /mnt/nfs_share/prod/kafka
readOnly: false
---
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
name: kafka-pvc
namespace: kafka
spec:
storageClassName: ""
volumeName: kafka-pv
accessModes:
- ReadWriteMany
volumeMode: Filesystem
resources:
requests:
storage: 1Gi
prod/kafka/kraft/kafka-kraft.yaml
+146
View File
@@ -0,0 +1,146 @@
apiVersion: v1
kind: Namespace
metadata:
name: kafka
---
apiVersion: v1
kind: Service
metadata:
name: kafka-headless
namespace: kafka
labels:
app: kafka
spec:
clusterIP: None
selector:
app: kafka
ports:
- name: broker
port: 9092
- name: controller
port: 9093
---
apiVersion: apps/v1
kind: StatefulSet
metadata:
name: kafka
namespace: kafka
spec:
serviceName: kafka-headless
replicas: 1
selector:
matchLabels:
app: kafka
template:
metadata:
labels:
app: kafka
spec:
securityContext:
runAsUser: 1000
runAsGroup: 1000
fsGroup: 1000
containers:
- name: kafka
image: apache/kafka:4.0.0
ports:
- containerPort: 9092
name: broker
- containerPort: 9093
name: controller
env:
- name: KAFKA_PROCESS_ROLES
value: "broker,controller"
- name: KAFKA_NODE_ID
value: "1"
- name: KAFKA_CONTROLLER_LISTENER_NAMES
value: "CONTROLLER"
- name: KAFKA_LISTENERS
value: "PLAINTEXT://0.0.0.0:9092,CONTROLLER://0.0.0.0:9093"
- name: KAFKA_ADVERTISED_LISTENERS
value: "PLAINTEXT://kafka-0.kafka-headless.kafka.svc.cluster.local:9092"
- name: KAFKA_LISTENER_SECURITY_PROTOCOL_MAP
value: "PLAINTEXT:PLAINTEXT,CONTROLLER:PLAINTEXT"
- name: KAFKA_CONTROLLER_QUORUM_VOTERS
value: "1@kafka-0.kafka-headless.kafka.svc.cluster.local:9093"
- name: KAFKA_LOG_DIRS
value: "/var/lib/kafka/data"
volumeMounts:
- name: kafka-storage
mountPath: /var/lib/kafka
volumeClaimTemplates:
- metadata:
name: kafka-storage
spec:
accessModes:
- ReadWriteOnce
storageClassName: longhorn
resources:
requests:
storage: 2Gi
---
apiVersion: v1
kind: Service
metadata:
name: kafka-ui
namespace: kafka
spec:
type: NodePort
selector:
app: kafka-ui
ports:
- name: http
port: 8080
targetPort: 8080
nodePort: 31890
---
apiVersion: apps/v1
kind: Deployment
metadata:
name: kafka-ui
namespace: kafka
spec:
replicas: 1
selector:
matchLabels:
app: kafka-ui
template:
metadata:
labels:
app: kafka-ui
spec:
containers:
- name: kafka-ui
image: provectuslabs/kafka-ui:latest
ports:
- containerPort: 8080
env:
- name: KAFKA_CLUSTERS_0_NAME
value: "kraft-cluster"
- name: KAFKA_CLUSTERS_0_BOOTSTRAPSERVERS
value: "kafka-0.kafka-headless.kafka.svc.cluster.local:9092"
---
apiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
name: kafka-ui-tls
namespace: kafka
spec:
entryPoints:
- websecure
routes:
- match: Host(`kafka-dev.allarddcs.nl`)
kind: Rule
services:
- name: kafka-ui
port: 8080
tls:
certResolver: letsencrypt
prod/kafka/message
+1
View File
@@ -0,0 +1 @@
Hoe is het met je?
prod/kafka/server.properties
+136
View File
@@ -0,0 +1,136 @@
# Licensed to the Apache Software Foundation (ASF) under one or more
# contributor license agreements. See the NOTICE file distributed with
# this work for additional information regarding copyright ownership.
# The ASF licenses this file to You under the Apache License, Version 2.0
# (the "License"); you may not use this file except in compliance with
# the License. You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
# see kafka.server.KafkaConfig for additional details and defaults
############################# Server Basics #############################
# The id of the broker. This must be set to a unique integer for each broker.
broker.id=0
############################# Socket Server Settings #############################
# The address the socket server listens on. It will get the value returned from
# java.net.InetAddress.getCanonicalHostName() if not configured.
# FORMAT:
# listeners = listener_name://host_name:port
# EXAMPLE:
# listeners = PLAINTEXT://your.host.name:9092
#listeners=PLAINTEXT://:9092
# Hostname and port the broker will advertise to producers and consumers. If not set,
# it uses the value for "listeners" if configured. Otherwise, it will use the value
# returned from java.net.InetAddress.getCanonicalHostName().
#advertised.listeners=PLAINTEXT://your.host.name:9092
# Maps listener names to security protocols, the default is for them to be the same. See the config documentation for more details
#listener.security.protocol.map=PLAINTEXT:PLAINTEXT,SSL:SSL,SASL_PLAINTEXT:SASL_PLAINTEXT,SASL_SSL:SASL_SSL
# The number of threads that the server uses for receiving requests from the network and sending responses to the network
num.network.threads=3
# The number of threads that the server uses for processing requests, which may include disk I/O
num.io.threads=8
# The send buffer (SO_SNDBUF) used by the socket server
socket.send.buffer.bytes=102400
# The receive buffer (SO_RCVBUF) used by the socket server
socket.receive.buffer.bytes=102400
# The maximum size of a request that the socket server will accept (protection against OOM)
socket.request.max.bytes=104857600
############################# Log Basics #############################
# A comma separated list of directories under which to store log files
log.dirs=/tmp/kafka-logs
# The default number of log partitions per topic. More partitions allow greater
# parallelism for consumption, but this will also result in more files across
# the brokers.
num.partitions=1
# The number of threads per data directory to be used for log recovery at startup and flushing at shutdown.
# This value is recommended to be increased for installations with data dirs located in RAID array.
num.recovery.threads.per.data.dir=1
############################# Internal Topic Settings #############################
# The replication factor for the group metadata internal topics "__consumer_offsets" and "__transaction_state"
# For anything other than development testing, a value greater than 1 is recommended to ensure availability such as 3.
offsets.topic.replication.factor=1
transaction.state.log.replication.factor=1
transaction.state.log.min.isr=1
############################# Log Flush Policy #############################
# Messages are immediately written to the filesystem but by default we only fsync() to sync
# the OS cache lazily. The following configurations control the flush of data to disk.
# There are a few important trade-offs here:
# 1. Durability: Unflushed data may be lost if you are not using replication.
# 2. Latency: Very large flush intervals may lead to latency spikes when the flush does occur as there will be a lot of data to flush.
# 3. Throughput: The flush is generally the most expensive operation, and a small flush interval may lead to excessive seeks.
# The settings below allow one to configure the flush policy to flush data after a period of time or
# every N messages (or both). This can be done globally and overridden on a per-topic basis.
# The number of messages to accept before forcing a flush of data to disk
#log.flush.interval.messages=10000
# The maximum amount of time a message can sit in a log before we force a flush
#log.flush.interval.ms=1000
############################# Log Retention Policy #############################
# The following configurations control the disposal of log segments. The policy can
# be set to delete segments after a period of time, or after a given size has accumulated.
# A segment will be deleted whenever *either* of these criteria are met. Deletion always happens
# from the end of the log.
# The minimum age of a log file to be eligible for deletion due to age
log.retention.hours=168
# A size-based retention policy for logs. Segments are pruned from the log unless the remaining
# segments drop below log.retention.bytes. Functions independently of log.retention.hours.
#log.retention.bytes=1073741824
# The maximum size of a log segment file. When this size is reached a new log segment will be created.
log.segment.bytes=1073741824
# The interval at which log segments are checked to see if they can be deleted according
# to the retention policies
log.retention.check.interval.ms=300000
############################# Zookeeper #############################
# Zookeeper connection string (see zookeeper docs for details).
# This is a comma separated host:port pairs, each corresponding to a zk
# server. e.g. "127.0.0.1:3000,127.0.0.1:3001,127.0.0.1:3002".
# You can also append an optional chroot string to the urls to specify the
# root directory for all kafka znodes.
zookeeper.connect=localhost:2181
# Timeout in ms for connecting to zookeeper
zookeeper.connection.timeout.ms=18000
############################# Group Coordinator Settings #############################
# The following configuration specifies the time, in milliseconds, that the GroupCoordinator will delay the initial consumer rebalance.
# The rebalance will be further delayed by the value of group.initial.rebalance.delay.ms as new members join the group, up to a maximum of max.poll.interval.ms.
# The default value for this is 3 seconds.
# We override this to 0 here as it makes for a better out-of-the-box experience for development and testing.
# However, in production environments the default value of 3 seconds is more suitable as this will help to avoid unnecessary, and potentially expensive, rebalances during application startup.
group.initial.rebalance.delay.ms=0
prod/kafka/strimzi/README.md
+8
View File
@@ -0,0 +1,8 @@
microk8s kubectl create ns kafka
kubectl create -f 'https://strimzi.io/install/latest?namespace=kafka' -n kafka
#single node:
kubectl apply -f https://strimzi.io/examples/latest/kafka/kafka-single-node.yaml -n kafka
prod/kafka/strimzi/kafka-single-node.yaml
+47
View File
@@ -0,0 +1,47 @@
apiVersion: kafka.strimzi.io/v1
kind: KafkaNodePool
metadata:
name: dual-role
labels:
strimzi.io/cluster: my-cluster
spec:
replicas: 1
roles:
- controller
- broker
storage:
type: jbod
volumes:
- id: 0
type: persistent-claim
size: 10Gi
deleteClaim: false
kraftMetadata: shared
---
apiVersion: kafka.strimzi.io/v1
kind: Kafka
metadata:
name: my-cluster
spec:
kafka:
version: 4.1.1
metadataVersion: 4.1-IV1
listeners:
- name: plain
port: 9092
type: internal
tls: false
- name: tls
port: 9093
type: internal
tls: true
config:
offsets.topic.replication.factor: 1
transaction.state.log.replication.factor: 1
transaction.state.log.min.isr: 1
default.replication.factor: 1
min.insync.replicas: 1
entityOperator:
topicOperator: {}
userOperator: {}
prod/kafka/strimzi/kafka-ui.yaml
+57
View File
@@ -0,0 +1,57 @@
apiVersion: v1
kind: Service
metadata:
name: kafka-ui
namespace: kafka
spec:
type: NodePort
selector:
app: kafka-ui
ports:
- name: http
port: 8080
targetPort: 8080
nodePort: 31890
---
apiVersion: apps/v1
kind: Deployment
metadata:
name: kafka-ui
namespace: kafka
spec:
replicas: 1
selector:
matchLabels:
app: kafka-ui
template:
metadata:
labels:
app: kafka-ui
spec:
containers:
- name: kafka-ui
image: provectuslabs/kafka-ui:latest
ports:
- containerPort: 8080
env:
- name: KAFKA_CLUSTERS_0_NAME
value: "my-cluster"
- name: KAFKA_CLUSTERS_0_BOOTSTRAPSERVERS
value: "my-cluster-kafka-bootstrap:9092"
---
apiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
name: kafka-ui-tls
namespace: kafka
spec:
entryPoints:
- websecure
routes:
- match: Host(`kafka-dev.allarddcs.nl`)
kind: Rule
services:
- name: kafka-ui
port: 8080
tls:
certResolver: letsencrypt
prod/kafka/utils/create-message.sh
+4
View File
@@ -0,0 +1,4 @@
#!/bin/bash
echo $2 >> message
kcat -b 192.168.2.183:9092 -t $1 message -P
rm message
prod/kafka/utils/create-topic.sh
+2
View File
@@ -0,0 +1,2 @@
#!/bin/bash
kcat -b 192.168.2.183:31372 -t $1 -P
prod/kafka/utils/hallo
+1
View File
@@ -0,0 +1 @@
hallo hier ben ik!
prod/kafka/utils/readmessage.sh
+3
View File
@@ -0,0 +1,3 @@
#!/bin/bash
kcat -q -C -b 192.168.2.183:9092 -t $1
exit
prod/kafka/zookeeper.yaml
+84
View File
@@ -0,0 +1,84 @@
apiVersion: v1
kind: Service
metadata:
name: zookeeper-service
namespace: kafka
labels:
app: zookeeper
spec:
ports:
- port: 2181
selector:
app: zookeeper
---
apiVersion: apps/v1
kind: Deployment
metadata:
name: zookeeper-deployment
namespace: kafka
spec:
replicas: 1
selector:
matchLabels:
app: zookeeper
template:
metadata:
labels:
app: zookeeper
spec:
containers:
- name: zookeeper
image: ubuntu/zookeeper:edge
ports:
- containerPort: 2181
name: zookeeper
protocol: TCP
volumeMounts:
- mountPath: /tmp/zookeeper
name: zookeeper
volumes:
- name: zookeeper
persistentVolumeClaim:
claimName: zookeeper-pvc
---
apiVersion: v1
kind: PersistentVolume
metadata:
name: zookeeper-pv
spec:
storageClassName: ""
capacity:
storage: 1Gi
accessModes:
- ReadWriteMany
persistentVolumeReclaimPolicy: Retain
mountOptions:
- hard
- nfsvers=4.1
nfs:
server: 192.168.2.111
path: /mnt/nfs_share/prod/zookeeper
readOnly: false
---
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
name: zookeeper-pvc
namespace: kafka
spec:
storageClassName: ""
volumeName: zookeeper-pv
accessModes:
- ReadWriteMany
volumeMode: Filesystem
resources:
requests:
storage: 1Gi