Chapter 7. Configuring kube-rbac-proxy for Knative for Apache Kafka

The kube-rbac-proxy component provides internal authentication and authorization capabilities for Knative for Apache Kafka.

7.1. Configuring kube-rbac-proxy resources for Knative for Apache Kafka

You can globally override resource allocation for the kube-rbac-proxy container by using the OpenShift Serverless Operator CR. 

You can also override resource allocation for a specific deployment.

The following configuration sets Knative Kafka kube-rbac-proxy minimum and maximum CPU and memory allocation:

KnativeKafka CR example

apiVersion: operator.serverless.openshift.io/v1alpha1
kind: KnativeKafka
metadata:
  name: knative-kafka
  namespace: knative-kafka
spec:
  config:
    workload:
      "kube-rbac-proxy-cpu-request": "10m" 1
      "kube-rbac-proxy-memory-request": "20Mi" 2
      "kube-rbac-proxy-cpu-limit": "100m" 3
      "kube-rbac-proxy-memory-limit": "100Mi" 4

1
Sets minimum CPU allocation.
2
Sets minimum RAM allocation.
3
Sets maximum CPU allocation.
4
Sets maximum RAM allocation.