README.md

Quick Start with Schema Registry

This folder contains a variant of the Quick Start SSL app configured to use the Confluent Schema Registry.

The docker-compose.yml file has been revised to configure the integration with Confluent Docker Image for Schema Registry as follows:

• new schema-registry service, pulled from the mentioned Docker image and configured with security settings

• kafka-connector:

  adaption of adapters.xml to include:

  • enabling of the Schema Registry:

    <param name="value.evaluator.schema.registry.enable">true</param>

  • configuration of the target Schema Registry URL:

    <param name="schema.registry.url">https://schema-registry:8084</param>

  • configuration of the trust store to authenticate the Schema Registry.

    <param name="schema.registry.encryption.truststore.path">secrets/kafka-connector.truststore.jks</param>
    <param name="schema.registry.encryption.truststore.password">kafka-connector-truststore-password</param>

  • configuration of the key store for client authentication with the Schema Registry.

    <param name="schema.registry.encryption.keystore.enable">true</param>
    <param name="schema.registry.encryption.keystore.path">secrets/kafka-connector.keystore.jks</param>
    <param name="schema.registry.encryption.keystore.password">kafka-connector-password</param>
    <param name="schema.registry.encryption.keystore.key.password">kafka-connector-private-key-password</param>

• producer:

  extension of the producer.properties configuration file with the settings required to communicate with the Schema Registry:

  ...
  # JSON deserializer with support for the Schema Registry
  value.serializer=io.confluent.kafka.serializers.json.KafkaJsonSchemaSerializer
  # Schema Registry URL
  schema.registry.url=https://schema-registry:8084
  # Trust store configuration to authenticate the Schema Registry
  schema.registry.ssl.truststore.location=/usr/app/secrets/producer.truststore.jks
  schema.registry.ssl.truststore.password=producer-truststore-password
  # Key store configuration for client authentication with the Schema Registry
  schema.registry.ssl.keystore.location=/usr/app/secrets/producer.keystore.jks
  schema.registry.ssl.keystore.password=producer-password
  schema.registry.ssl.key.password=producer-private-key-password

In addition, the schema-registry service references the local secrets/schema-registry folder to retrieve its secrets:

• the trust store file schema-registry.truststore.jks;
• the key store file schema-registry.keystore.jks;

You can regenerate all of them with:

$ ./generate-secrets.sh

Run

From this directory, follow the same instructions you can find in the Quick Start section of the main README file.