Page Comparison

...

1. Helm version v3+

2. Running Kubernetes cluster version 1.18.0 or higher

3. kubectl latest version

Instructions

1. Create a Namespace for the HiveMQ/Postgres deployment.
   You can skip this step you want to run everything in “default” namespace.

   Execute the following command to create a namespace:

   Code Block
   language bash
   kubectl create namespace <namespace name>

   Switch to the newly created namespace:

   Code Block
   language bash
   kubectl config set-context --current --namespace=<namespace name>

2. Deploy Postgres

   Add the Bitnami Helm repository:

   Code Block
   language bash
   helm repo add bitnami <httpshttps://charts.bitnami.com/bitnami>bitnami

   Create a postgres_values.yaml file to configure Postgres deployment:

   Code Block
   language yaml
   global: storageClass#storageClass: "rook-ceph-block" postgresql: auth: password: password postgresPassword: password username: admin primary: initdb: scriptsConfigMap: ese-db-init

   Create a ConfigMap called ese-db-init containing the ese-db-init.sql script, which creates tables and inserts necessary data for testing purposes:
   

   View file
   name 1_permissions.sql

   View file
   name 0_ese-db-init.sql

   Code Block
   language bash
   kubectl create configmap ese-db-init --from-file 0_ese-db-init.sql --from-file 1_permissions.sql

   Deploy Postgres using Helm:

   Code Block
   language bash
   helm upgrade postgres --install bitnami/postgresql --values postgres_values.yaml

   Verify the status of the pod:

   Code Block
   language bash
   kubectl get pods

   If an error occurs, check the pod logs:

   Code Block
   language bash
   kubectl logs <pod name>

   Connect to the Postgres pod to verify the connection:

   Code Block
   language bash
   psql --host 127.0.0.1 -U postgres -d postgres -p 5432

   Use the following commands in the Postgres shell to interact with the database:

   • \l: List the databases.

   • \c <db name>: Connect to a specific database.

   • \dt: List the tables from the connected database.

   • select * from users;
     

3. Deploy HiveMQ with Enterprise Security Extension (ESE)

Create a ConfigMap for the HiveMQ license (skip this step if you don't have a license yet):

...

kubectl create configmap enterprise-security-extension-config --from-file=enterprise-security-extension config.xml

Create a hivemq_values.yaml file to deploy HiveMQ using the Kubernetes operator. Ensure that the ESE extension is preinstalled: Full values of the operator can be found here

...

hivemq:
  cpu: 2
  memory: 2Gi
  nodeCount: "2"
  
  extensions:
  - enabled: true
    extensionUri: preinstalled
    initialization: |
      # A little hack because k8s configMaps can't handle sub-directories
      [[ -e /conf-override/extensions/hivemq-enterprise-security-extension/config.xml ]] &&
      rm -f $(pwd)/conf/config.xml &&
      cp -s /conf-override/extensions/hivemq-enterprise-security-extension/config.xml $(pwd)/conf/config.xml
      [[ ! -f drivers/postgres-jdbc.jar ]] &&
      curl -L <httpshttps://jdbc.postgresql.org/download/postgresql-42.2.14.jar>jar --output drivers/jdbc/postgres.jar
    name: hivemq-enterprise-security-extension
    configMap: enterprise-security-extension-config
  
  ports:
    - name: "mqtt"
      port: 1883
      expose: true
      patch:
        - '[{"op":"add","path":"/spec/selector/hivemq.com~1node-offline","value":"false"},{"op":"add","path":"/metadata/annotations","value":{"service.spec.externalTrafficPolicy":"Local"}}]'
        # If you want Kubernetes to expose the MQTT port to external traffic
        # - '[{"op":"add","path":"/spec/type","value":"LoadBalancer"}]'
    - name: "cc"
      port: 8080
      expose: true
      patch:
        - '[{"op":"add","path":"/spec/sessionAffinity","value":"ClientIP"}]'
        # If you want Kubernetes to expose the MQTT port to external traffic
        # - '[{"op":"add","path":"/spec/type","value":"LoadBalancer"}]'
  configMaps:
    - name: hivemq-license
      path: /opt/hivemq/license
operator:
  admissionWebhooks:
    enabled: false

...