Merge pull request #11813 from qzhuyan/fix/william/genrpc-ssl-port-align

Fix/william/genrpc ssl port align
This commit is contained in:
William Yang 2023-10-25 09:04:19 +02:00 committed by GitHub
commit 37dd44c3d7
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
5 changed files with 17 additions and 0 deletions

View File

@ -89,6 +89,7 @@ jobs:
EMQX_RPC__CACERTFILE: /opt/emqx/etc/certs/cacert.pem EMQX_RPC__CACERTFILE: /opt/emqx/etc/certs/cacert.pem
EMQX_RPC__CIPHERS: TLS_AES_256_GCM_SHA384,TLS_AES_128_GCM_SHA256 EMQX_RPC__CIPHERS: TLS_AES_256_GCM_SHA384,TLS_AES_128_GCM_SHA256
EMQX_RPC__TLS_VERSIONS: "[tlsv1.2]" EMQX_RPC__TLS_VERSIONS: "[tlsv1.2]"
EMQX_RPC__PORT_DISCOVERY: manual
EOL EOL
- name: run emqx on chart (k8s) - name: run emqx on chart (k8s)
if: matrix.discovery == 'k8s' if: matrix.discovery == 'k8s'

View File

@ -1151,6 +1151,7 @@ translation("emqx") ->
translation("gen_rpc") -> translation("gen_rpc") ->
[ [
{"default_client_driver", fun tr_gen_rpc_default_client_driver/1}, {"default_client_driver", fun tr_gen_rpc_default_client_driver/1},
{"ssl_client_port", fun tr_gen_rpc_ssl_client_port/1},
{"ssl_client_options", fun tr_gen_rpc_ssl_options/1}, {"ssl_client_options", fun tr_gen_rpc_ssl_options/1},
{"ssl_server_options", fun tr_gen_rpc_ssl_options/1}, {"ssl_server_options", fun tr_gen_rpc_ssl_options/1},
{"socket_ip", fun(Conf) -> {"socket_ip", fun(Conf) ->
@ -1226,6 +1227,9 @@ collector_enabled(disabled, _) -> [].
tr_gen_rpc_default_client_driver(Conf) -> tr_gen_rpc_default_client_driver(Conf) ->
conf_get("rpc.protocol", Conf). conf_get("rpc.protocol", Conf).
tr_gen_rpc_ssl_client_port(Conf) ->
conf_get("rpc.ssl_server_port", Conf).
tr_gen_rpc_ssl_options(Conf) -> tr_gen_rpc_ssl_options(Conf) ->
Ciphers = conf_get("rpc.ciphers", Conf), Ciphers = conf_get("rpc.ciphers", Conf),
Versions = conf_get("rpc.tls_versions", Conf), Versions = conf_get("rpc.tls_versions", Conf),

View File

@ -0,0 +1,4 @@
Fix schema: RPC client ssl port alighn with configured server port.
And ensure RPC ports are opened in helm chart.

View File

@ -121,6 +121,10 @@ spec:
{{- end }} {{- end }}
- name: ekka - name: ekka
containerPort: 4370 containerPort: 4370
- name: genrpc-manual
containerPort: 5369
- name: genrpc2-auto
containerPort: 5370
envFrom: envFrom:
- configMapRef: - configMapRef:
name: {{ include "emqx.fullname" . }}-env name: {{ include "emqx.fullname" . }}-env

View File

@ -121,6 +121,10 @@ spec:
{{- end }} {{- end }}
- name: ekka - name: ekka
containerPort: 4370 containerPort: 4370
- name: genrpc-manual
containerPort: 5369
- name: genrpc2-auto
containerPort: 5370
envFrom: envFrom:
- configMapRef: - configMapRef:
name: {{ include "emqx.fullname" . }}-env name: {{ include "emqx.fullname" . }}-env