diff options
| author | Staffan Olsson <staffan@repos.se> | 2017-08-01 06:52:58 +0200 |
|---|---|---|
| committer | Staffan Olsson <staffan@repos.se> | 2017-08-05 07:03:07 +0200 |
| commit | c0645eefd5dc75b9e9b002b5dd5b009d39b6fd42 (patch) | |
| tree | fe02a946414a20175eab6cf96ed70014c8888bea | |
| parent | 23e1d9e6e052cb374e22bc732505bf4e026fb3a3 (diff) | |
| download | kubernetes-kafka-c0645eefd5dc75b9e9b002b5dd5b009d39b6fd42.tar.gz kubernetes-kafka-c0645eefd5dc75b9e9b002b5dd5b009d39b6fd42.tar.bz2 kubernetes-kafka-c0645eefd5dc75b9e9b002b5dd5b009d39b6fd42.zip | |
Starts scripting, but the API call gets 403 for anonymous user
| -rw-r--r-- | 10broker-config.yml | 13 |
1 files changed, 13 insertions, 0 deletions
diff --git a/10broker-config.yml b/10broker-config.yml index bbf0e44..93bc8f0 100644 --- a/10broker-config.yml +++ b/10broker-config.yml @@ -11,6 +11,19 @@ data: export KAFKA_BROKER_ID=${HOSTNAME##*-} sed -i "s/\${KAFKA_BROKER_ID}/$KAFKA_BROKER_ID/" /etc/kafka/server.properties + PODNAME=$HOSTNAME + NAMESPACE=$(cat /var/run/secrets/kubernetes.io/serviceaccount/namespace) + + # todo add curl to kafka image, switch to a curl image for init or write the whole lookup in java + hash curl 2>/dev/null || { apt-get update; DEBIAN_FRONTEND=noninteractive apt-get install curl -y --no-install-recommends; } + + API=https://$KUBERNETES_SERVICE_HOST:$KUBERNETES_SERVICE_PORT/api + AUTH="--cacert /run/secrets/kubernetes.io/serviceaccount/ca.crt --header \"Authorization: Bearer $(cat /run/secrets/kubernetes.io/serviceaccount/token)\"" + + curl -s $AUTH $API/namespaces/kafka/pods/$PODNAME -I --fail-early || { + echo "Access problems. Could be RBAC." + } + server.properties: |- # Licensed to the Apache Software Foundation (ASF) under one or more # contributor license agreements. See the NOTICE file distributed with |