Merge pull request #1022 from godspeedsystems/kafka-ssl

feat: Add SSL configuration for Kafka connection
godspeedsystems · Jun 20, 2024 · 60d1ded · 60d1ded
2 parents be043a6 + ee491f1
commit 60d1ded
Show file tree

Hide file tree

Showing 2 changed files with 19 additions and 1 deletion.
diff --git a/src/core/validation/datasources/kafka.schema.json b/src/core/validation/datasources/kafka.schema.json
@@ -18,6 +18,18 @@
             ],
             "minItems": 1
         },
+        "ssl_key": {
+            "type": "string"
+        },
+        "ssl_cert": {
+            "type": "string"
+        },
+        "ssl_ca": {
+            "type": "string"
+        },
+        "reject": {
+            "type": "boolean"
+        },
         "producer": {
             "type": "object",
             "properties": {

diff --git a/src/kafka/index.ts b/src/kafka/index.ts
@@ -5,7 +5,7 @@
 import { Consumer, Kafka, Producer, logLevel as kafkaLogLevel }  from 'kafkajs';
 import axios from 'axios';
 import config from 'config';
-
+import fs from 'fs'; 
 import { GSActor, GSCloudEvent, GSStatus } from '../core/interfaces';
 import { logger } from '../core/logger';
 
@@ -196,6 +196,12 @@ export default class KafkaMessageBus {
 
                 return brokers;
               },
+              ssl: {
+                      rejectUnauthorized: config.reject,
+                      key: fs.readFileSync(config.ssl_key,'utf-8'),
+                      cert: fs.readFileSync(config.ssl_cert,'utf-8'),
+                      ca: [fs.readFileSync(config.ssl_ca,'utf-8')]
+                    },
               logCreator: pinoLogCreator
         });