Updating the docs for tls.enabled (#3493)

* Updating the docs for tls.enabled

Signed-off-by: Matthias Wessendorf <mwessend@redhat.com>

* Update docs/eventing/samples/kafka/channel/index.md

Co-authored-by: Ashleigh Brennan <abrennan@redhat.com>

Co-authored-by: Ashleigh Brennan <abrennan@redhat.com>
This commit is contained in:
Matthias Wessendorf 2021-04-22 21:09:37 +02:00 committed by GitHub
parent cc2928d423
commit 1521045992
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 12 additions and 0 deletions

View File

@ -216,6 +216,18 @@ $ kubectl create secret --namespace <namespace> generic <kafka-auth-secret> \
*NOTE:* It is important to use the same keys; `user`, `password` and `saslType`.
### SASL authentication using public CA certificates
If you want to use SASL with public CA certificates, you must use the `tls.enabled=true` flag, rather than the `ca.crt` argument, when creating the secret. For example:
```
$ kubectl create secret --namespace <namespace> generic <kafka-auth-secret> \
--from-literal=tls.enabled=true \
--from-literal=password="SecretPassword" \
--from-literal=saslType="SCRAM-SHA-512" \
--from-literal=user="my-sasl-user"
```
Reference your secret and the namespace of the secret in the `config-kafka` ConfigMap:
```
apiVersion: v1