From 989ec06228f3c4225bd99859bfb35008656ca3b9 Mon Sep 17 00:00:00 2001
From: ychangkim <kkmbal@gmail.com>
Date: Wed, 24 Dec 2025 14:52:12 +0900
Subject: [PATCH] kafka-cluster

---
 charts/kafka-cluster/custom-values.yaml   | 5 +++++
 charts/kafka-cluster/templates/kafka.yaml | 8 ++++++++
 charts/kafka-cluster/values.yaml          | 6 ++++++
 3 files changed, 19 insertions(+)

diff --git a/charts/kafka-cluster/custom-values.yaml b/charts/kafka-cluster/custom-values.yaml
index 9074423..ae25879 100644
--- a/charts/kafka-cluster/custom-values.yaml
+++ b/charts/kafka-cluster/custom-values.yaml
@@ -39,6 +39,11 @@ config:
   numPartitions: 3
   deleteTopicEnable: true
 
+internalListener:
+  enabled: true
+  port: 9094
+  tls: true
+
 oauth:
   keycloakUrl: "https://keycloak.example.com"
   keycloakRealm: "your-realm"
diff --git a/charts/kafka-cluster/templates/kafka.yaml b/charts/kafka-cluster/templates/kafka.yaml
index eedf8a7..b015029 100644
--- a/charts/kafka-cluster/templates/kafka.yaml
+++ b/charts/kafka-cluster/templates/kafka.yaml
@@ -40,6 +40,14 @@ spec:
           tlsTrustedCertificates:
             - secretName: {{ .Values.oauth.tlsSecretName }}
               certificate: {{ .Values.oauth.tlsCertificate }}
+      {{- if .Values.internalListener.enabled }}
+      - name: internal
+        type: cluster-ip
+        port: {{ .Values.internalListener.port }}
+        tls: {{ .Values.internalListener.tls }}
+        authentication:
+          type: scram-sha-512
+      {{- end }}
     config:
       offsets.topic.replication.factor: {{ .Values.config.offsetsTopicReplicationFactor }}
       transaction.state.log.replication.factor: {{ .Values.config.transactionStateLogReplicationFactor }}
diff --git a/charts/kafka-cluster/values.yaml b/charts/kafka-cluster/values.yaml
index da403bc..303e166 100644
--- a/charts/kafka-cluster/values.yaml
+++ b/charts/kafka-cluster/values.yaml
@@ -51,6 +51,12 @@ listener:
   port: 9093
   tls: false
 
+# Internal listener configuration
+internalListener:
+  enabled: false
+  port: 9094
+  tls: true
+
 # OAuth/Keycloak configuration
 oauth:
   keycloakUrl: ""