Getting Kafka Client Certificates
-
Create a user role with capability “Owner” and assign it to a user account of choice:
Figure 1: User Role Configuration to Receive Policies from Kafka -
Perform policies enforcement as described in Enforce Policies. This first step is necessary as it creates a Kafka topic that is associated with active scope.
-
Navigate to
-
Select the tab “Data Taps” and download Kafka client certificates by clicking on the download button under column “Actions”. Make sure to select the Java Keystore format in the download dialog.
Figure 2: Data Taps View -
The downloaded clients certificates file usually has a name like Policy-Stream-10-Policies- Subscription.jks.tar.gz. Create a directory and unpack it underneath the created directory as below:
mkdir Policy-Stream-10-Policies-Subscription tar -C Policy-Stream-10-Policies-Subscription -zxf Policy-Stream-10-Policies-Subscription.jks.tar.gz