Merge branch 'release/v2.1.14' into main

Author: github-actions

deploy-versions.json

@@ -1 +1 @@
-[{"text":"Latest","icon":"fas fa-home","key":"latest","tag":"v2.1.13"}]
+[{"text":"Latest","icon":"fas fa-home","key":"latest","tag":"v2.1.14"}]

package.json

@@ -1,7 +1,7 @@
 {
   "name": "zilla-docs",
   "type": "module",
-  "version": "2.1.13",
+  "version": "2.1.14",
   "description": "The official documentation for the aklivity/zilla open-source project",
   "keywords": [],
   "author": "aklivity.io",

src/.vuepress/public/many_to_one.png

@@ -111,6 +111,10 @@ export const enSidebar = sidebar({
           prefix: "how-tos/amazon-msk/secure-public-access/",
           link: "how-tos/amazon-msk/secure-public-access/production.md",
           children: [
+            {
+              text: "CDK",
+              link: "https://github.com/aklivity/zilla-plus-aws-templates/tree/main/amazon-msk/cdk/secure-public-access",
+            },
             {
               text: "Terraform",
               link: "https://github.com/aklivity/zilla-plus-aws-templates/tree/main/amazon-msk/cdktf/secure-public-access",
@@ -143,6 +147,26 @@ export const enSidebar = sidebar({
         },
       ],
     },
+    {
+      text: "Secure Private Access",
+      icon: "aky-zilla-plus",
+      children: [
+        {
+          text: "Deployment Options",
+          link: "concepts/kafka-proxies/secure-private-access.md",
+          children: [],
+        },
+        {
+          text: "Amazon MSK",
+          children: [
+            {
+              text: "CDK",
+              link: "https://github.com/aklivity/zilla-plus-aws-templates/tree/main/amazon-msk/cdk/secure-private-access",
+            },
+          ],
+        },
+      ],
+    },
     {
       text: "IoT Ingest and Control",
       icon: "aky-zilla-plus",
@@ -401,6 +425,12 @@ export const enSidebar = sidebar({
           link: "solutions/concepts/kafka-proxies/secure-public-access.md",
           children: [],
         },
+        {
+          text: "Secure Private Access on AWS",
+          icon: "aky-zilla-plus",
+          link: "solutions/concepts/kafka-proxies/secure-private-access.md",
+          children: [],
+        },
         {
           text: "IoT Ingest and Control on AWS",
           icon: "aky-zilla-plus",

src/.vuepress/public/one_to_many.png

@@ -72,6 +72,7 @@ bindings:
               - topic: device/#
         with:
           messages: mqtt-devices
+        exit: north_kafka_cache_client
     #endregion device_mapping
 
   #region kafka_sync

src/.vuepress/public/secure_private_access.png

@@ -11,7 +11,7 @@ Unlike other hosted Kafka services, Amazon MSK is not readily reachable over the
 "Public Access" can be turned on for MSK clusters running Apache Kafka 2.6.0 or later. Follow the MSK [Public Access Guide](https://docs.aws.amazon.com/msk/latest/developerguide/public-access.html)to do so.
 
 ::: warning
-MSK's “Public Access” feature directly exposes your brokers to the internet, which may present additional security concerns. An alternative and more flexible solution is the [Secure Public Access](../../solutions/concepts/kafka-proxies/secure-public-access.md) solution using [Zilla Plus for Amazon MSK](https://aws.amazon.com/marketplace/pp/prodview-jshnzslazfm44). The solution acts as intermediary that securely routes connectivity between external clients and MSK brokers without having to modify the brokers.
+MSK's “Public Access” feature directly exposes your brokers to the internet, which may present additional security concerns. An alternative and more flexible solution is the [Secure Public Access](../../solutions/concepts/kafka-proxies/secure-public-access.md) solution using [Zilla Plus for Amazon MSK](https://aws.amazon.com/marketplace/pp/prodview-jshnzslazfm44). The solution acts as intermediary that securely routes connectivity between external clients and MSK brokers without having to modify the broker configuration. Specifically, no broker configuration change is needed for advertised listeners.
 :::
 
 ## Set up mTLS Authentication between MSK and Zilla

src/.vuepress/sidebar/en.ts

@@ -21,3 +21,59 @@ Schema context represents an independent scope in the Schema Registry.
 > `integer` | Default: `300`
 
 The maximum duration in seconds to keep a cached schema before fetching the schema again.
+
+#### options.tls
+
+> `object`
+
+TLS configuration for connecting to secure Schema Registry. A configured `vault` is required to manage the keys and certificates necessary for TLS authentication.
+
+```yaml {2}
+tls:
+  trust:
+    - serverca
+  keys:
+    - client1
+```
+
+##### options.tls.keys
+
+> `array` of `string`
+
+A list of reference names for the Vault key.
+
+##### options.tls.trust
+
+> `array` of `string`
+
+A list of reference names for the Vault certificate.
+
+##### options.tls.trustcacerts
+
+> `boolean`
+
+Trust CA certificates. When the this property is not explicitly set it will be automatically set to `true` if [options.tls.trust](#options-tls-trust) is `null`.
+
+#### options.credentials
+
+> `object`
+
+Configures the credentials used to authenticate the user.
+
+```yaml {2}
+credentials:
+  headers:
+    authorization: Basic dXNlcjpzZWNyZXQ=
+```
+
+##### options.credentials.headers
+
+> `object`
+
+Authentication headers to be included in requests to the Schema Registry.
+
+###### options.credentials.headers.authorization
+
+> `string`
+
+The authorization header for authenticating API requests. For example, use a Basic token or Bearer token format.

src/cookbooks/mqtt.kafka.broker/zilla.yaml

@@ -27,4 +27,5 @@ catalog:
 
 ## Configuration (\* required)
 
+<!-- @include: ../bindings/.partials/vault.md -->
 <!-- @include: ./.partials/options-schema-registry.md -->