I want to use externalKafka with SASL_SSL How do I pass additional configs?

[bhataprameya]

I have an external Kafka cluster that only accepts SASL_SSL connections. I’ve mounted the necessary certificates and secrets (username and password) to the pods, but I’m unsure how to configure the Sentry Helm chart to use them.

Specifically, I need to pass the following configurations, but I’m not sure where or how to define them:

rdkafka.sasl.username ${username} # Should be read from secret
rdkafka.sasl.password ${password} # Should be read from secret
rdkafka.socket.keepalive.enable true
rdkafka.ssl.ca.location /etc/root-ssl/certificate
rdkafka.ssl.certificate.location /etc/ssl/tls.crt
rdkafka.ssl.key.location /etc/ssl/tls.key
rdkafka.ssl.endpoint.identification.algorithm none

How can I pass these configurations properly through the Helm chart?

[jiriks74]

You'll have to add a mount and a volume to every deployment (except things like nginx) and then set some options.

For snuba and vroom there are environment variables and for relay and sentry there are config options.

I'll look at my options a bit later and anonymize them. It's a bit tedious as you have to do it for everything that connects to Kafka but it works.