add aclfile

This commit is contained in:
2026-01-30 11:57:46 +01:00
parent 6aaf9151c6
commit 2da6ff6da0
3 changed files with 4 additions and 0 deletions

0
aclfile Normal file
View File

View File

@@ -10,17 +10,20 @@ per_listener_settings true
listener 1884 listener 1884
protocol mqtt protocol mqtt
allow_anonymous true allow_anonymous true
acl_file /mosquitto/config/aclfile
listener 1883 listener 1883
protocol mqtt protocol mqtt
allow_anonymous false allow_anonymous false
password_file /mosquitto/config/pwfile password_file /mosquitto/config/pwfile
acl_file /mosquitto/config/aclfile
listener 8883 listener 8883
protocol mqtt protocol mqtt
tls_version tlsv1.2 tls_version tlsv1.2
allow_anonymous false allow_anonymous false
password_file /mosquitto/config/pwfile password_file /mosquitto/config/pwfile
acl_file /mosquitto/config/aclfile
certfile /mosquitto/config/ssl/server.crt certfile /mosquitto/config/ssl/server.crt
keyfile /mosquitto/config/ssl/server.key keyfile /mosquitto/config/ssl/server.key
dhparamfile /mosquitto/config/dhparam.pem dhparamfile /mosquitto/config/dhparam.pem

View File

@@ -13,6 +13,7 @@ openssl dhparam -out $DHPARAM 2048
kubectl create configmap mosquitto-broker-config \ kubectl create configmap mosquitto-broker-config \
--from-file=mosquitto.conf=mosquitto.conf \ --from-file=mosquitto.conf=mosquitto.conf \
--from-file=pwfile=$SECRETS_PLAINTEXT \ --from-file=pwfile=$SECRETS_PLAINTEXT \
--from-file=aclfile=aclfile \
--from-file=dhparam.pem=$DHPARAM \ --from-file=dhparam.pem=$DHPARAM \
--namespace=$NAMESPACE \ --namespace=$NAMESPACE \
--dry-run=client -o yaml | kubectl apply -f - -n $NAMESPACE --dry-run=client -o yaml | kubectl apply -f - -n $NAMESPACE