{"type":"doc","content":[{"type":"extension","attrs":{"layout":"default","extensionType":"com.atlassian.confluence.macro.core","extensionKey":"toc","parameters":{"macroParams":{},"macroMetadata":{"macroId":{"value":"0f372610-64d5-486c-9eae-487e1f38a1b4"},"schemaVersion":{"value":"1"},"title":"Table of Contents"}},"localId":"85d6993f-4611-4f9c-bed5-1fb83f5ddcc4"}},{"type":"panel","attrs":{"panelType":"note"},"content":[{"type":"paragraph","content":[{"text":"Prequisite:","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Access to infrastructure with Kubectl. E.g.","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"AKS ","type":"text"},{"type":"inlineCard","attrs":{"url":"https://hivemq.atlassian.net/wiki/spaces/HMS/pages/2691203114/Setting+up+AKS+Cluster+in+Azure#Manage-the-cluster"}}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"EKS ","type":"text"},{"type":"inlineCard","attrs":{"url":"https://hivemq.atlassian.net/wiki/spaces/KB/pages/2699330129"}},{"text":" ","type":"text"}]}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Running HiveMQ Cluster ","type":"text"},{"type":"inlineCard","attrs":{"url":"https://hivemq.atlassian.net/wiki/spaces/KB/pages/2691039283"}}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Values.yaml file ","type":"text"},{"type":"inlineCard","attrs":{"url":"https://hivemq.atlassian.net/wiki/spaces/KB/pages/2691039283/Install+HiveMQ+using+Kubernetes+Operator#Add-Helm-repository-and-download-values.yaml-file"}}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Kubectl, Helm and MQTT CLI ","type":"text"},{"type":"inlineCard","attrs":{"url":"https://hivemq.atlassian.net/wiki/spaces/KB/pages/2700902571"}}]}]}]}]},{"type":"panel","attrs":{"panelType":"note"},"content":[{"type":"paragraph","content":[{"text":"The default login for the control center is username ","type":"text"},{"text":"admin","type":"text","marks":[{"type":"code"}]},{"text":" and password ","type":"text"},{"text":"hivemq","type":"text","marks":[{"type":"code"}]},{"text":".","type":"text"}]}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Exposing port 8080 using Port Forwarding","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Run the following command to get the services and look for the MQTT service (hivemq-hivemq-cc in our case)","type":"text"}]},{"type":"codeBlock","content":[{"text":"kubectl get services","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Run the port forwarding as follows","type":"text"}]},{"type":"codeBlock","content":[{"text":"kubectl port-forward hivemq-hivemq-cc 8080:8080","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"After running this command, you can access the control center on localhost:8080","type":"text"}]}]}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Exposing the control center using a Load Balancer","type":"text"}]},{"type":"panel","attrs":{"panelType":"note"},"content":[{"type":"paragraph","content":[{"text":"Exposing ip via load balancer in the following steps makes it public. Please check out HiveMQ authentication and authorisation extensions to control client access and scope. ","type":"text"},{"type":"inlineCard","attrs":{"url":"https://www.hivemq.com/products/extensions/"}}]}]},{"type":"panel","attrs":{"panelType":"note"},"content":[{"type":"paragraph","content":[{"text":"The following steps ","type":"text"},{"text":"do not work for EKS","type":"text","marks":[{"type":"strong"}]},{"text":"(AWS). We recommend creating a Network Load Balancer ","type":"text"},{"type":"inlineCard","attrs":{"url":"https://docs.aws.amazon.com/elasticloadbalancing/latest/network/introduction.html"}},{"text":" separately to access your HiveMQ instance. ","type":"text"}]}]},{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Open values.yaml and search for port 1880 under hivemq.ports.port","type":"text"}]},{"type":"codeBlock","content":[{"text":"- name: \"cc\"\n port: 8080\n expose: true\n patch:\n - '[{\"op\":\"add\",\"path\":\"/spec/sessionAffinity\",\"value\":\"ClientIP\"}]'\n # If you want Kubernetes to expose the HiveMQ control center via load balancer.\n # Warning: You should consider configuring proper security and TLS beforehand. Ingress may be a better option here.\n # - '[{\"op\":\"add\",\"path\":\"/spec/type\",\"value\":\"LoadBalancer\"}]'","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Uncomment and expose the loadbalancer for control center ","type":"text"}]},{"type":"codeBlock","content":[{"text":"- name: \"cc\"\n port: 8080\n expose: true\n patch:\n - '[{\"op\":\"add\",\"path\":\"/spec/sessionAffinity\",\"value\":\"ClientIP\"}]'\n # If you want Kubernetes to expose the HiveMQ control center via load balancer.\n # Warning: You should consider configuring proper security and TLS beforehand. Ingress may be a better option here.\n - '[{\"op\":\"add\",\"path\":\"/spec/type\",\"value\":\"LoadBalancer\"}]'","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Save the file and apply the changes","type":"text"}]},{"type":"codeBlock","content":[{"text":"helm upgrade hivemq --install hivemq/hivemq-operator --values values.yaml","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Check if the service for port 8080 has an external IP address (98.67.131.223 in our case)","type":"text"}]},{"type":"codeBlock","content":[{"text":"kubectl get services","type":"text"}]},{"type":"paragraph"},{"type":"mediaSingle","attrs":{"layout":"center","width":736,"widthType":"pixel"},"content":[{"type":"media","attrs":{"width":1076,"id":"66fc5ab2-1b2d-4ae2-9283-717087ea52ba","collection":"contentId-2698641525","type":"file","height":30},"marks":[{"type":"border","attrs":{"size":2,"color":"#091e4224"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Open the browser using the IP address and port e.g. ","type":"text"},{"text":"98.67.131.223:8080","type":"text","marks":[{"type":"code"}]}]}]}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Securing your setup with basic username/password change","type":"text"}]},{"type":"panel","attrs":{"panelType":"note"},"content":[{"type":"paragraph","content":[{"text":"Securing Control Center through HiveMQ Enterprise Security Extension will override the username/password set via values.yaml. ","type":"text"},{"type":"inlineCard","attrs":{"url":"https://hivemq.atlassian.net/wiki/spaces/KB/pages/2694479921"}},{"text":" ","type":"text"}]}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Open values.yaml and look for the following section under override","type":"text"}]},{"type":"codeBlock","content":[{"text":"\n ${HIVEMQ_CONTROL_CENTER_USER}\n ${HIVEMQ_CONTROL_CENTER_PASSWORD}\n","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Generate an encrypted shasum (in our case, username : test , password : abc123 ). This generates a hashed password.","type":"text"}]},{"type":"codeBlock","content":[{"text":"#echo -n testabc123 | shasum -a 256","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Update the field username and password","type":"text"}]},{"type":"codeBlock","content":[{"text":"\n test\n 9e2ee742214c2940b9e21149d4e1749d98d8d74e2b0f7453d190b1a7d73308b9\n","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Save the file and apply the changes","type":"text"}]},{"type":"codeBlock","content":[{"text":"helm upgrade hivemq --install hivemq/hivemq-operator --values values.yaml","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Once the pods spin up again, the new username/password should be applied. We tested it with incorrect password which leads to an error. The correct password works. ","type":"text"},{"type":"hardBreak"}]},{"type":"mediaSingle","attrs":{"layout":"center","width":463,"widthType":"pixel"},"content":[{"type":"media","attrs":{"width":463,"id":"f7d11256-f31d-40fb-a14f-185b160bd9f9","collection":"contentId-2698641525","type":"file","height":478}}]}]}]},{"type":"paragraph","content":[{"text":"Please check out official documentation here ","type":"text"},{"type":"inlineCard","attrs":{"url":"https://docs.hivemq.com/hivemq/latest/control-center/configuration.html#access-control"}},{"text":" ","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Next steps","type":"text"}]},{"type":"panel","attrs":{"panelType":"note"},"content":[{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"type":"inlineCard","attrs":{"url":"https://hivemq.atlassian.net/wiki/spaces/KB/pages/2690973760"}}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"type":"inlineCard","attrs":{"url":"https://hivemq.atlassian.net/wiki/spaces/KB/pages/2691072059"}}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"type":"inlineCard","attrs":{"url":"https://hivemq.atlassian.net/wiki/spaces/KB/pages/2691923973"}}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"type":"inlineCard","attrs":{"url":"https://hivemq.atlassian.net/wiki/spaces/KB/pages/2693890139"}}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"type":"inlineCard","attrs":{"url":"https://hivemq.atlassian.net/wiki/spaces/KB/pages/2694479921"}}]}]}]}]}],"version":1}

Browser not supported