kafka: add a script to create the kafka credentials

These credentials are used to connect through the public access

I initially tried to convert the script in a management script (add/list/remove) but fall in a rabbit hole so finally give up.

Test Plan

• getty

diff origin/production/getty.internal.softwareheritage.org current/getty.internal.softwareheritage.org
*******************************************
+ File[/etc/default/prometheus-kafka-consumer-group-exporter/rocquencourt_staging] =>
   parameters =>
     "content": "# prometheus-kafka-consumer-group-exporter (For cluster rocquenc...
     "ensure": "present",
     "group": "root",
     "mode": "0644",
     "notify": "Service[prometheus-kafka-consumer-group-exporter@rocquencourt_sta...
     "owner": "root"
*******************************************
+ File[/usr/local/sbin/create_kafka_users_rocquencourt.sh] =>
   parameters =>
     "content": "#!/bin/bash\n\nset -e\n\nzookeepers=kafka1.internal.softwareheri...
     "ensure": "present",
     "group": "root",
     "mode": "0700",
     "owner": "root"
*******************************************
+ File[/usr/local/sbin/create_kafka_users_rocquencourt_staging.sh] =>
   parameters =>
     "content": "#!/bin/bash\n\nset -e\n\nzookeepers=journal1.internal.staging.sw...
     "ensure": "present",
     "group": "root",
     "mode": "0700",
     "owner": "root"
*******************************************
+ Profile::Prometheus::Export_scrape_config[kafka-consumer-group-rocquencourt_staging] =>
   parameters =>
     "job": "kafka-consumer-group",
     "labels": {
       "cluster": "rocquencourt_staging"
     },
     "target": "192.168.100.102:9209"
*******************************************
+ Service[prometheus-kafka-consumer-group-exporter@rocquencourt_staging] =>
   parameters =>
     "enable": true,
     "ensure": "running"
*******************************************
*** End octocatalog-diff on getty.internal.softwareheritage.org

• storage1

diff origin/production/storage1.internal.staging.swh.network current/storage1.internal.staging.swh.network
*******************************************
- File[/etc/default/prometheus-kafka-consumer-group-exporter/rocquencourt_staging]
*******************************************
- File[/etc/default/prometheus-kafka-consumer-group-exporter]
*******************************************
- Package[prometheus-kafka-consumer-group-exporter]
*******************************************
- Profile::Prometheus::Export_scrape_config[kafka-consumer-group-rocquencourt_staging]
*******************************************
- Service[prometheus-kafka-consumer-group-exporter@rocquencourt_staging]
*******************************************
*** End octocatalog-diff on storage1.internal.staging.swh.network

kafka1:

*** Running octocatalog-diff on host kafka1.internal.softwareheritage.org
I, [2022-01-20T19:18:01.505916 #2246748]  INFO -- : Catalogs compiled for kafka1.internal.softwareheritage.org
I, [2022-01-20T19:18:01.804223 #2246748]  INFO -- : Diffs computed for kafka1.internal.softwareheritage.org
I, [2022-01-20T19:18:01.804265 #2246748]  INFO -- : No differences
*** End octocatalog-diff on kafka1.internal.softwareheritage.org

---

Migrated from D6986 (view on Phabricator)

data/common/kafka.yaml

@@ -68,5 +68,26 @@ kafka::clusters:
     public_tls_port: 9093
     internal_tls_port: 9094
     public_listener_network: 128.93.166.0/26
+  rocquencourt_staging:
+    zookeeper::chroot: '/kafka/softwareheritage'
+    zookeeper::servers:
+      - journal1.internal.staging.swh.network
+    brokers:
+      storage1.internal.staging.swh.network:
+        id: 2
+        public_hostname: broker1.journal.staging.swh.network
+    broker::heap_opts: "%{alias('kafka::broker::heap_opts')}"
+    superusers:
+      - User:swh-admin-olasd
+      # Users connecting in the plaintext endpoint are ANONYMOUS
+      # TODO: remove when explicit ACLs are given to producers
+      - User:ANONYMOUS
+    tls: true
+    plaintext_port: 9092
+    public_tls_port: 9093
+    internal_tls_port: 9094
+    cluster_config_overrides:
+      offsets.topic.replication.factor: 1 # this is mandatory with only one node
+    public_listener_network: "%{alias('kafka::cluster::public_network')}"