kafka-cluster

charts/kafka-cluster/custom-values.yaml

@@ -39,6 +39,11 @@ config:
   numPartitions: 3
   deleteTopicEnable: true
 
+internalListener:
+  enabled: true
+  port: 9094
+  tls: true
+
 oauth:
   keycloakUrl: "https://keycloak.example.com"
   keycloakRealm: "your-realm"

charts/kafka-cluster/templates/kafka.yaml

@@ -40,6 +40,14 @@ spec:
           tlsTrustedCertificates:
             - secretName: {{ .Values.oauth.tlsSecretName }}
               certificate: {{ .Values.oauth.tlsCertificate }}
+      {{- if .Values.internalListener.enabled }}
+      - name: internal
+        type: cluster-ip
+        port: {{ .Values.internalListener.port }}
+        tls: {{ .Values.internalListener.tls }}
+        authentication:
+          type: scram-sha-512
+      {{- end }}
     config:
       offsets.topic.replication.factor: {{ .Values.config.offsetsTopicReplicationFactor }}
       transaction.state.log.replication.factor: {{ .Values.config.transactionStateLogReplicationFactor }}

charts/kafka-cluster/values.yaml

@@ -51,6 +51,12 @@ listener:
   port: 9093
   tls: false
 
+# Internal listener configuration
+internalListener:
+  enabled: false
+  port: 9094
+  tls: true
+
 # OAuth/Keycloak configuration
 oauth:
   keycloakUrl: ""