Skip to content

F162682: Remove kafka ssl listener.#488

Draft
APIM-KiranVaddadi wants to merge 4 commits into
stablefrom
F162682
Draft

F162682: Remove kafka ssl listener.#488
APIM-KiranVaddadi wants to merge 4 commits into
stablefrom
F162682

Conversation

@APIM-KiranVaddadi

Copy link
Copy Markdown
Contributor

Description of the change

Benefits

Drawbacks

Applicable issues

  • fixes #

Additional information

Checklist

  • [] Chart version bumped in Chart.yaml according to semver.
  • [] Variables are documented in the README.md
  • [] Title of the PR starts with chart name (e.g. [charts/gateway])
  • [] If the chart contains a values-production.yaml apart from values.yaml, ensure that you implement the changes in both files

@APIM-KiranVaddadi APIM-KiranVaddadi changed the title F162682: Remove kafka pls F162682: Remove kafka ssl listener. Mar 13, 2026
@APIM-KiranVaddadi APIM-KiranVaddadi marked this pull request as draft March 13, 2026 06:55
…ypes

Add per-broker SNI hostname generation and dynamic ingress/route/tlsroute
rules for Kafka TCP Proxy. Each Kafka broker gets a unique hostname
(e.g., kafka-proxy-1.domain) routed via TLS passthrough on port 443,
eliminating the need for multiple external ports. Shorten K8s service
port names to fit 15-char limit (kfk-proxy-boot, kfk-proxy-brk-N).
Update brokerStartPort default to 9194 to avoid port collision with
listenPort after init-tssh.sh -1 adjustment. Add advertisedPort and
brokerAddressPattern config values. Remove intelligence-specific RBAC
in favor of shared service account.

Made-with: Cursor
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant