andykirkham/kafka-certs repository overview

⁠Kafka SSL Trust Stopre Generator

⁠Inputs

The Root CA certificates mounted thus:-

/var/certs/ca-root-key.pem
/var/certs/ca-root-crt.pem

We can override the Root CA certificate path and file names with Env vars (optional):

• $CA_PATH Path for the Root CA certificate files, default: /var/certs
• $KEY_FILE CA root key file name, default: ca-root-key.pem
• $CRT_FILE CA root crt file name, default: ca-root-crt.pem

The following Env Vars for inputs are required

$CN Common name

$C Country code (example UK)

$ST Region

$L Location (example London)

$O Organisation

$OU Organisatiola Unit

$emailAddress

$STOREPASS The JKS keystore password

CN is the URL of your broker

⁠Outputs

The following Env Vars for outputs are required

$OUTDIR The directory to write certs (should be mounted into container writeable)