kafka.yml

---
apiVersion: extensions/v1beta1
kind: Deployment
metadata:
  name: kafka
  namespace: openwhisk
  labels:
    name: kafka
spec:
  replicas: 1
  template:
    metadata:
      labels:
        name: kafka
    spec:
      restartPolicy: Always

      containers:
      - name: kafka
        imagePullPolicy: IfNotPresent
        image: wurstmeister/kafka:0.11.0.1
        ports:
        - name: kafka
          containerPort: 9092
        env:
        - name: "KAFKA_BROKER_ID"
          value: "0"
        - name: "KAFKA_ADVERTISED_HOST_NAME"
          value: "$(KAFKA_SERVICE_HOST)"
        - name: "KAFKA_ADVERTISED_PORT"
          value: "$(KAFKA_SERVICE_PORT_KAFKA)"
        - name: "KAFKA_HOST_NAME"
          valueFrom:
            fieldRef:
              fieldPath: status.podIP
        - name: "KAFKA_PORT"
          value: "$(KAFKA_SERVICE_PORT_KAFKA)"

        # zookeeper info
        - name: "KAFKA_ZOOKEEPER_CONNECT"
          value: "$(ZOOKEEPER_SERVICE_HOST):$(ZOOKEEPER_SERVICE_PORT_ZOOKEEPER)"

---
apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
  name: kafka-netpol
  namespace: openwhisk
spec:
  podSelector:
    matchLabels:
      name: kafka
  ingress:
  # Allow invoker and controller to connect to kafka
  - from:
    - podSelector:
        matchLabels:
          name: controller
    - podSelector:
        matchLabels:
          name: invoker
    ports:
     - port: 9092
  # kafkas can connect to each other
  - from:
    - podSelector:
        matchLabels:
          name: kafka
    ports:
     - port: 9092