confluent-platform-separate-listener.yaml

apiVersion: platform.confluent.io/v1beta1
kind: Zookeeper
metadata:
  name: zookeeper
  namespace: confluent
spec:
  replicas: 3
  image:
    application: confluentinc/cp-zookeeper:7.9.0
    init: confluentinc/confluent-init-container:2.11.0
  dataVolumeCapacity: 10Gi
  logVolumeCapacity: 10Gi
  tls:
    # For this component, Confluent for Kubernetes will autogenerate and
    # configure server certs, using a certificate authority specified in
    # the secret `ca-pair-sslcerts`.
    # This same configuration is specified for all other components.
    autoGeneratedCerts: true
---
apiVersion: platform.confluent.io/v1beta1
kind: Kafka
metadata:
  name: kafka
  namespace: confluent
spec:
  replicas: 3
  image:
    application: confluentinc/cp-server:7.9.0
    init: confluentinc/confluent-init-container:2.11.0
  dataVolumeCapacity: 10Gi
  tls:
    autoGeneratedCerts: true
  listeners:
    internal:
      # The `internal` listener will be TLS enabled.
      tls:
        enabled: true
        # Since no secretRef is specified, the Kafka auto-generated tls 
        # configuration specified above will be used for this listener.
  metricReporter:
    enabled: true
    bootstrapEndpoint: kafka:9071
    tls:
      enabled: true
  services:
    kafkaRest:
      tls:
        enabled: true
      listeners:
        internal:
          # Since no secretRef is specified, the kafkaRest internal listener
          # tls will piggyback kafkaRest.tls which also has no secretRef specified,
          # so the Kafka auto-generated tls configuration will be used for this listener.
          tls:
            enabled: true
        external:
          tls:
            enabled: true
            secretRef: tls-kafka-rest
          externalAccess:
            type: loadBalancer
            loadBalancer:
              domain: my.domain
  dependencies:
    zookeeper:
      endpoint: zookeeper.confluent.svc.cluster.local:2182
      tls:
        enabled: true
---
apiVersion: platform.confluent.io/v1beta1
kind: Connect
metadata:
  name: connect
  namespace: confluent
spec:
  replicas: 2
  image:
    application: confluentinc/cp-server-connect:7.9.0
    init: confluentinc/confluent-init-container:2.11.0
  tls:
    autoGeneratedCerts: true
  dependencies:
    kafka:
      bootstrapEndpoint: kafka:9071
      tls:
        enabled: true
---
apiVersion: platform.confluent.io/v1beta1
kind: KsqlDB
metadata:
  name: ksqldb
  namespace: confluent
spec:
  replicas: 2
  image:
    application: confluentinc/cp-ksqldb-server:7.9.0
    init: confluentinc/confluent-init-container:2.11.0
  dataVolumeCapacity: 10Gi
  tls:
    autoGeneratedCerts: true
  listeners:
    internal:
      # Since no secretRef is specified for the ksqldb internal listener,
      # the auto-generated tls configuration will be used for this listener.
      tls:
        enabled: true
    external:
      tls:
        enabled: true
        secretRef: tls-ksqldb
      externalAccess:
        type: loadBalancer
        loadBalancer:
          domain: my.domain
  dependencies:
    kafka:
      bootstrapEndpoint: kafka:9071
      tls:
        enabled: true
---
apiVersion: platform.confluent.io/v1beta1
kind: SchemaRegistry
metadata:
  name: schemaregistry
  namespace: confluent
spec:
  replicas: 1
  image:
    application: confluentinc/cp-schema-registry:7.9.0
    init: confluentinc/confluent-init-container:2.11.0
  tls:
    autoGeneratedCerts: true
  listeners:
    internal:
      # Since no secretRef is specified for the schemaregistry internal listener,
      # the auto-generated tls configuration will be used for this listener.
      tls:
        enabled: true
    external:
      tls:
        enabled: true
        secretRef: tls-sr
      externalAccess:
        type: loadBalancer
        loadBalancer:
          domain: my.domain
  dependencies:
    kafka:
      bootstrapEndpoint: kafka:9071
      tls:
        enabled: true
---
apiVersion: platform.confluent.io/v1beta1
kind: ControlCenter
metadata:
  name: controlcenter
  namespace: confluent
spec:
  replicas: 1
  image:
    application: confluentinc/cp-enterprise-control-center:7.9.0
    init: confluentinc/confluent-init-container:2.11.0
  dataVolumeCapacity: 10Gi
  tls:
    autoGeneratedCerts: true
  dependencies:
    kafka:
      bootstrapEndpoint: kafka.confluent.svc.cluster.local:9071
      tls:
        enabled: true
    schemaRegistry:
      # talk to schemaRegistry via its internal listener port
      url: https://schemaregistry.confluent.svc.cluster.local:9081
      tls:
        enabled: true
    ksqldb:
    - name: ksql
      # talk to ksqldb via its internal listener port
      url: https://ksqldb.confluent.svc.cluster.local:9088
      tls:
        enabled: true
    connect:
    - name: connect-dev
      url:  https://connect.confluent.svc.cluster.local:8083
      tls:
        enabled: true
---
apiVersion: platform.confluent.io/v1beta1
kind: KafkaRestProxy
metadata:
  name: kafkarestproxy
  namespace: confluent
spec:
  replicas: 1
  image:
    application: confluentinc/cp-kafka-rest:7.9.0
    init: confluentinc/confluent-init-container:2.11.0
  tls:
    autoGeneratedCerts: true
  dependencies:
    schemaRegistry:
      url: https://schemaregistry.confluent.svc.cluster.local:9081
      tls:
        enabled: true
---
apiVersion: platform.confluent.io/v1beta1
kind: KafkaRestClass
metadata:
  name: default
  namespace: confluent
spec:
  kafkaRest:
    # talk to kafkaRest via its internal listener port
    endpoint: http://kafka.confluent.svc.cluster.local:9090
    tls:
      enabled: true