From 177161a85022d48458b4164fb0883d54a9bef65c Mon Sep 17 00:00:00 2001
From: G-nther <g.nther.contact@gmail.com>
Date: Fri, 16 Apr 2021 18:40:39 +0200
Subject: [PATCH] feat(kafka-setup): add option for SSL and topic partition
 config via environment (#2398)

---
 docker/kafka-setup/Dockerfile     |  8 +++-----
 docker/kafka-setup/env/docker.env | 16 ++++++++++++++++
 docker/kafka-setup/kafka-setup.sh | 22 ++++++++++++++++++++++
 3 files changed, 41 insertions(+), 5 deletions(-)
 create mode 100755 docker/kafka-setup/kafka-setup.sh

diff --git a/docker/kafka-setup/Dockerfile b/docker/kafka-setup/Dockerfile
index 692e6acb8f..cffdcdb8eb 100644
--- a/docker/kafka-setup/Dockerfile
+++ b/docker/kafka-setup/Dockerfile
@@ -5,8 +5,6 @@ ENV METADATA_AUDIT_EVENT_NAME="MetadataAuditEvent_v4"
 ENV METADATA_CHANGE_EVENT_NAME="MetadataChangeEvent_v4"
 ENV FAILED_METADATA_CHANGE_EVENT_NAME="FailedMetadataChangeEvent_v4"
 
-CMD echo Waiting for Kafka to be ready... && \
-    cub kafka-ready -b $KAFKA_BOOTSTRAP_SERVER 1 60 && \
-    kafka-topics --create --if-not-exists --zookeeper $KAFKA_ZOOKEEPER_CONNECT --partitions 1 --replication-factor 1 --topic $METADATA_AUDIT_EVENT_NAME && \
-    kafka-topics --create --if-not-exists --zookeeper $KAFKA_ZOOKEEPER_CONNECT --partitions 1 --replication-factor 1 --topic $METADATA_CHANGE_EVENT_NAME && \
-    kafka-topics --create --if-not-exists --zookeeper $KAFKA_ZOOKEEPER_CONNECT --partitions 1 --replication-factor 1 --topic $FAILED_METADATA_CHANGE_EVENT_NAME
+COPY ./kafka-setup.sh ./kafka-setup.sh
+
+CMD ./kafka-setup.sh
diff --git a/docker/kafka-setup/env/docker.env b/docker/kafka-setup/env/docker.env
index 91f64e1cac..fb0ae3cf2c 100644
--- a/docker/kafka-setup/env/docker.env
+++ b/docker/kafka-setup/env/docker.env
@@ -1,2 +1,18 @@
 KAFKA_ZOOKEEPER_CONNECT=zookeeper:2181
 KAFKA_BOOTSTRAP_SERVER=broker:29092
+
+# Configure the topics that are created by kafka-setup
+# METADATA_AUDIT_EVENT_NAME=MetadataAuditEvent_v4
+# METADATA_CHANGE_EVENT_NAME=MetadataChangeEvent_v4
+# FAILED_METADATA_CHANGE_EVENT_NAME=FailedMetadataChangeEvent_v4
+# PARTITIONS=1
+# REPLICATION_FACTOR=1
+
+# Configure for an SSL-Connection to Kafka
+# KAFKA_PROPERTIES_SECURITY_PROTOCOL=SSL
+# KAFKA_PROPERTIES_SSL_KEYSTORE_LOCATION=
+# KAFKA_PROPERTIES_SSL_KEYSTORE_PASSWORD=
+# KAFKA_PROPERTIES_SSL_KEY_PASSWORD=
+# KAFKA_PROPERTIES_SSL_TRUSTSTORE_LOCATION=
+# KAFKA_PROPERTIES_SSL_TRUSTSTORE_PASSWORD=
+# KAFKA_PROPERTIES_SSL_ENDPOINT_IDENTIFICATION_ALGORITHM=
diff --git a/docker/kafka-setup/kafka-setup.sh b/docker/kafka-setup/kafka-setup.sh
new file mode 100755
index 0000000000..eb2144b977
--- /dev/null
+++ b/docker/kafka-setup/kafka-setup.sh
@@ -0,0 +1,22 @@
+#!/bin/bash
+: ${PARTITIONS:=1}
+: ${REPLICATION_FACTOR:=1}
+
+: ${KAFKA_PROPERTIES_SECURITY_PROTOCOL:=PLAINTEXT}
+
+echo "bootstrap.servers=$KAFKA_BOOTSTRAP_SERVER" > connection.properties
+echo "security.protocol=$KAFKA_PROPERTIES_SECURITY_PROTOCOL" >> connection.properties
+
+if [[ $KAFKA_PROPERTIES_SECURITY_PROTOCOL == "SSL" ]]; then
+    echo "ssl.keystore.location=$KAFKA_PROPERTIES_SSL_KEYSTORE_LOCATION" >> connection.properties
+    echo "ssl.keystore.password=$KAFKA_PROPERTIES_SSL_KEYSTORE_PASSWORD" >> connection.properties
+    echo "ssl.key.password=$KAFKA_PROPERTIES_SSL_KEY_PASSWORD" >> connection.properties
+    echo "ssl.truststore.location=$KAFKA_PROPERTIES_SSL_TRUSTSTORE_LOCATION" >> connection.properties
+    echo "ssl.truststore.password=$KAFKA_PROPERTIES_SSL_TRUSTSTORE_PASSWORD" >> connection.properties
+    echo "ssl.endpoint.identification.algorithm=$KAFKA_PROPERTIES_SSL_ENDPOINT_IDENTIFICATION_ALGORITHM" >> connection.properties
+fi
+
+cub kafka-ready -c connection.properties -b $KAFKA_BOOTSTRAP_SERVER 1 60 && \
+kafka-topics --create --if-not-exists --command-config connection.properties --zookeeper $KAFKA_ZOOKEEPER_CONNECT --partitions $PARTITIONS --replication-factor $REPLICATION_FACTOR --topic $METADATA_AUDIT_EVENT_NAME && \
+kafka-topics --create --if-not-exists --command-config connection.properties --zookeeper $KAFKA_ZOOKEEPER_CONNECT --partitions $PARTITIONS --replication-factor $REPLICATION_FACTOR --topic $METADATA_CHANGE_EVENT_NAME && \
+kafka-topics --create --if-not-exists --command-config connection.properties --zookeeper $KAFKA_ZOOKEEPER_CONNECT --partitions $PARTITIONS --replication-factor $REPLICATION_FACTOR --topic $FAILED_METADATA_CHANGE_EVENT_NAME