name: Run Common Test Suites and Kafka GSSAPI (Kerberos) Example

- name: Set up Docker Buildx

uses: docker/setup-buildx-action@v1

- name: Cache register

uses: actions/cache@v2

with:

path: /tmp/.buildx-cache

key: ${{ runner.os }}-buildx-${{ hashFiles('./example/image/Dockerfile') }}

- name: Build Docker image

uses: docker/build-push-action@v2

with:

context: ./example/image/

file: ./example/image/Dockerfile

builder: ${{ steps.buildx.outputs.name }}

load: true

tags: brod_gssapi_dockerfile:latest

cache-from: type=local,src=/tmp/.buildx-cache

cache-to: type=local,dest=/tmp/.buildx-cache-new

# This ugly bit is necessary if you don't want your cache to grow forever

# till it hits GitHub's limit of 5GB.

# Temp fix

# https://github.com/docker/build-push-action/issues/252

# https://github.com/moby/buildkit/issues/1896

- name: Move cache

run: |

- name: Compile and run tests

run: ./scripts/run_test_in_docker_container.sh

- name: Run Kafka GSSAPI (Kerberos) Authentication Example (known working brod version)

run: |

- name: Run Kafka GSSAPI (Kerberos) Authentication Example (latest official brod version)

run: |

- name: Run Kafka GSSAPI (Kerberos) Authentication Example (brod master branch)

run: |

secret/*

SASL GSSAPI Kerberos Kafka Brod Setup with `brod_gssapi`

* docker

* docker-compose

Set up Kerberos, Zookeeper, Kafka and clients in Docker containers:

./up

Test that Kafka is setup with Kerberos authentication (You need to run `./up`

first to start the containers):

./test_send_receive.sh

Use a brod client with the brod_gssapi plugin to do Kerberos authentication and

send and receive messages.

./test_send_receive_erlang.sh

./test_send_receive_erlang.sh rebar.config_brod_master

./test_send_receive_erlang.sh rebar.config_brod_latest

./test_send_receive_erlang.sh rebar.config_the_name_of_your_custom_rebar_config_file

Stop the Docker containers:

./down

Some of the code in this directory is copied from https://github.com/Accenture/reactive-interaction-gateway/tree/kafka-sasl-kerberos-authentication/examples/api-gateway/kafka-kerberos (which gives credits to [Dabz/kafka-security-playbook](https://github.com/Dabz/kafka-security-playbook/tree/master/kerberos))

if [ "$1" != "" ]

echo "USING CONFIG $1"

rm rebar.lock

cp "$1" rebar.config

rm -rf _build

rebar3 clean

rebar3 compile

erl -noshell `rebar3 path | xargs -n1 echo -pa | tr '\n' ' '` -eval 'example:main([])'

rebar3 clean

rm -rf _build

if [ "$1" != "" ]

git checkout rebar.config

git checkout rebar.lock

{erl_opts, [no_debug_info]}.

{plugins, [{rebar3_path_deps, {git, "https://github.com/benoitc/rebar3_path_deps",

{ref, "b68c8550bde5fc00e6b2849184b08e70bc015cb6"}}}]}.

{deps, [{brod_gssapi, {path, "../../"}},

{brod, "3.16.3"}]}.

{escript_incl_apps, [example, brod_gssapi, brod]}.

{escript_main_app, example}.

{escript_name, example}.

{escript_emu_args, "%%! +sbtu +A1\n"}.

{profiles, [{test,

[{erl_opts, [debug_info]}

]}]}.

{erl_opts, [no_debug_info]}.

{plugins, [{rebar3_path_deps, {git, "https://github.com/benoitc/rebar3_path_deps",

{ref, "b68c8550bde5fc00e6b2849184b08e70bc015cb6"}}}]}.

{deps, [{brod_gssapi, {path, "../../"}},

brod]}.

{escript_incl_apps, [example, brod_gssapi, brod]}.

{escript_main_app, example}.

{escript_name, example}.

{escript_emu_args, "%%! +sbtu +A1\n"}.

%% Profiles

{profiles, [{test,

[{erl_opts, [debug_info]}

]}]}.

{erl_opts, [no_debug_info]}.

{plugins, [{rebar3_path_deps, {git, "https://github.com/benoitc/rebar3_path_deps",

{ref, "b68c8550bde5fc00e6b2849184b08e70bc015cb6"}}}]}.

{deps, [{brod_gssapi, {path, "../../"}},

{brod, {git, "https://github.com/kafka4beam/brod.git",

{branch, "master"}}}]}.

{escript_incl_apps, [example, brod_gssapi, brod]}.

{escript_main_app, example}.

{escript_name, example}.

{escript_emu_args, "%%! +sbtu +A1\n"}.

%% Profiles

{profiles, [{test,

[{erl_opts, [debug_info]}

]}]}.

{"1.2.0",

[{<<"brod">>,{pkg,<<"brod">>,<<"3.16.3">>},0},

{<<"brod_gssapi">>,{path,"../../",{mtime,<<"2022-06-08T16:56:49Z">>}},0},

{<<"crc32cer">>,{pkg,<<"crc32cer">>,<<"0.1.8">>},2},

{<<"kafka_protocol">>,{pkg,<<"kafka_protocol">>,<<"4.0.3">>},1},

{<<"sasl_auth">>,{pkg,<<"sasl_auth">>,<<"2.0.0-rc1">>},1},

{<<"snappyer">>,{pkg,<<"snappyer">>,<<"1.2.8">>},1},

{<<"supervisor3">>,{pkg,<<"supervisor3">>,<<"1.1.11">>},1}]}.

[

{pkg_hash,[

{<<"brod">>, <<"9A18F2EE7E6D933A82D5E44C3360CE3A624E90E0FE61006DCD6AE2802E044788">>},

{<<"crc32cer">>, <<"C6C2275C5FB60A95F4935D414F30B50EE9CFED494081C9B36EBB02EDFC2F48DB">>},

{<<"kafka_protocol">>, <<"E3C21CBA4B9CD278460EFA2B9AC6A5A9BB715FCFDA25945538E45B813F68F4B9">>},

{<<"sasl_auth">>, <<"6285C6C353B410025D6330E65D3F1FB8C6C99DE67A65203A8A2E0727CA16B3EF">>},

{<<"snappyer">>, <<"201CE9067A33C71A6A5087C0C3A49A010B17112D461E6DF696C722DCB6D0934A">>},

{<<"supervisor3">>, <<"D81CDEC31D102FDE407423E1D05B569572850DEEBED86B951D5233C387CBA80B">>}]},

{pkg_hash_ext,[

{<<"brod">>, <<"DB872814719D2A1C27663BC3B01D1EF3F7588658EF05E30FDF92B97F67F75D9E">>},

{<<"crc32cer">>, <<"251499085482920DEB6C9B7AADABF9FB4C432F96ADD97AB42AEE4501E5B6F591">>},

{<<"kafka_protocol">>, <<"528E14A571B02B9D055DAB1160A2ACA8474F2EC627A115EFB828AAE2BCE6E5AA">>},

{<<"sasl_auth">>, <<"713A1B3147B9927D1D9854388227D37CE55745FF880CEB9A517949CA5FB9C7A2">>},

{<<"snappyer">>, <<"35518E79A28548B56D8FD6AEE2F565F12F51C2D3D053F9CFA817C83BE88C4F3D">>},

{<<"supervisor3">>, <<"E6C2DEDBCABCBA24995A218ACA12DB5E208B80D3252692B22EF0F1A266104B50">>}]}

].

sleep infinity

{application, example,

[{description, "An escript"},

{vsn, "0.1.0"},

{registered, []},

{applications,

[kernel,

stdlib,

brod,

brod_gssapi,

sasl_auth

]},

{env,[]},

{modules, []},

{licenses, ["Apache 2.0"]},

{links, []}

]}.