This message was deleted.
# generals
Slackbot
10/04/2023, 3:33 PMThis message was deleted.
y
Yu Wei Sung
10/04/2023, 3:37 PMwhat do you mean “encryption of message”? end2end encryption? or tls encryption? for public signed cert, you can turn off trustcertfile path. what deployment tool are you using? apache helmchart?
a
Alexander Brown
10/04/2023, 3:39 PMtls encryption so message in route is encrypted preventing man-in-middle-attack. I am using helm chart for deployment, more specifically datastax in this scenario. https://github.com/datastax/pulsar-helm-chart
y
Yu Wei Sung
10/04/2023, 3:41 PMyou may need to play a bit of j2 template to disable ca crt mountpoint in the helmchart. but you are right, let’s encrypt root ca is public and you don’t need to inject ca.crt anywhere.
a
Alexander Brown
10/04/2023, 3:43 PMThank you so much for the guidance. Is there a similar tool to use for clusterIssuer that will generate ca.crt for ease of use in this scenario?
y
Yu Wei Sung
10/04/2023, 3:46 PMYu Wei Sung
10/04/2023, 3:47 PMyou can also use SN community operator. https://medium.com/@yuweisung/streamnative-pulsar-operator-tutorial-part-1-7fbbbb07397e
Yu Wei Sung
10/04/2023, 3:48 PM