dapr
/
docs
mirror of https://github.com/dapr/docs.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Update setup-mqtt (#748) 

- Include options to configure and enable communication with TLS.
- Fixes https://github.com/dapr/docs/issues/734
This commit is contained in:
Mayank Kumar 2020-08-17 22:27:30 +05:30 committed by GitHub
parent 663cfee99f
commit a66a0f625f
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 25 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

27
howto/setup-pub-sub-message-broker/setup-mqtt.md
View File

@ -62,7 +62,7 @@ spec:
name: websocket name: websocket
protocol: TCP protocol: TCP
``` ```
You can then interact with the server using the client port: `mqtt://mqtt-broker.default.svc.cluster.local:1883` You can then interact with the server using the client port: `tcp://mqtt-broker.default.svc.cluster.local:1883`
## Create a Dapr component ## Create a Dapr component
@ -80,7 +80,7 @@ spec:
type: pubsub.mqtt type: pubsub.mqtt
metadata: metadata:
- name: url - name: url
value: "mqtt://[username][:password]@host.domain[:port]" value: "tcp://[username][:password]@host.domain[:port]"
- name: qos - name: qos
value: 1 value: 1
- name: retain - name: retain
@ -89,11 +89,34 @@ spec:
value: "false" value: "false"
``` ```
To configure communication using TLS, ensure mosquitto broker is configured to support certificates.
Pre-requisite includes `certficate authority certificate`, `ca issued client certificate`, `client private key`.
Make following additional changes to mqtt pubsub components for supporting TLS.
```yaml
...
spec:
type: pubsub.mqtt
metadata:
- name: url
value: "tcps://host.domain[:port]"
- name: caCert
value: ''
- name: clientCert
value: ''
- name: clientKey
value: ''
```
Where: Where:
* **url** (required) is the address of the MQTT broker. * **url** (required) is the address of the MQTT broker.
- use **tcp://** scheme for non-TLS communication.
- use **tcps://** scheme for TLS communication.
* **qos** (optional) indicates the Quality of Service Level (QoS) of the message. (Default 0) * **qos** (optional) indicates the Quality of Service Level (QoS) of the message. (Default 0)
* **retain** (optional) defines whether the message is saved by the broker as the last known good value for a specified topic. (Default false) * **retain** (optional) defines whether the message is saved by the broker as the last known good value for a specified topic. (Default false)
* **cleanSession** (optional) will set the "clean session" in the connect message when client connects to an MQTT broker . (Default true) * **cleanSession** (optional) will set the "clean session" in the connect message when client connects to an MQTT broker . (Default true)
* **caCert** (required for using TLS) is the certificate authority certificate.
* **clientCert** (required for using TLS) is the client certificate.
* **clientKey** (required for using TLS) is the client key.
The above example uses secrets as plain strings. It is recommended to use a secret store for the secrets as described [here](../../concepts/secrets/README.md) The above example uses secrets as plain strings. It is recommended to use a secret store for the secrets as described [here](../../concepts/secrets/README.md)