Add AWSIOT connection for testing

deployments/mosquitto/templates/awsiot.sealed.json

@@ -0,0 +1,24 @@
+{
+  "kind": "SealedSecret",
+  "apiVersion": "bitnami.com/v1alpha1",
+  "metadata": {
+    "name": "awsiot-certificates",
+    "namespace": "mosquitto",
+    "creationTimestamp": null
+  },
+  "spec": {
+    "template": {
+      "metadata": {
+        "name": "awsiot-certificates",
+        "namespace": "mosquitto",
+        "creationTimestamp": null
+      }
+    },
+    "encryptedData": {
+      "awsiot.ca.pem": "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",
+      "awsiot.cert.crt": "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",
+      "awsiot.private.key": "AgBvz2c44qwLtZsNx8Ox0YqYXvhLm6Dfw0d6+N2HV4CM1XKb8e8QSa/SlNlxrq7xq5tyRHtJAcosOiSsy401+05ivvZI72VKycQeayuWSRUuOvbJXSGdi/mSnVP3jrLPrjX0KOWewi1XH06RETsgSRdSAWBHuHS/WVP1RH/QLsa6re0UB4wVXkD42fb3LT3fB/MrQkoGae3i8w4K9K/D3+FsNt5j1bxfbz7gnjsWmN4pVo9hlHdl9veMLhl/Rst+TPs/rQcMlWx0JJXLHPrtJsiscizmoxBDa57BaC0wTlMwNYqioPpiP+w9bdsXz8bYh0lj4o0NRTBYZ5OGwvfIPpNHfV9fAfD3x7OZs7pF2ZwFEBcTgprmZUEdX4PiY9DRi3fprgTlzH6JFK6KUFggzJNoOOGWyaSthXKZeMSfFbV80dq4SvklC6ifZQLjX0QYO/S2IjxvHdyssNhtuSU0U51zVC8WiWBE95B0u0/0wasZPczNLW/DjhPghi4izMPCg+fzBBWZU1qypERdoLp3Sy0it/tTfGqyTj5ult4aaFi05QOYAe1oomKA/MduQ1GTyYHNummQC7zjkJ2HA1ur28VFCLDSefDvwb+A13BrPjcWqLRtoASUGS/93zsPuTqK1sKvIql9BJlOxiEEeE8V1Wp/47te49z5vbWEMGw2CBqjpcMaMHfi2QSN9y+NS0f3zvBEw2FkheBpGgpmHzAOt/gmL9gEyjcJDd4vkq/pANkn4l0pZqOe+sFcvpzLQd7wEoePLYwbnOrAOREKcp8dGKXBu6X4DbgOVUIjkj29M7JpTAaTtO9CxrUxDE+D0ijOnPmkeSMDcsZmQ27JNKdnCoXgnhE/F0J1mDoJPkrNU9v6cGPXwxRRn3HCVdHBzMHMP7XZDa4q28HhYxUOEToHv9UVlGkQQiU9XG/aNZJx02qN8bR7GdovEgfhyL1bNrG8ochmDymNZLLpab3SPVU6m7IN+s7tzAOwHaQoADJE8ZGOP1jRdiD/+gtu3RUCUiriyXgWaI6tY6NCszAyuHHRE9GAOqm7g/gZqWQgnFnh/dSIJMfC22NfUqAYvRqzb1TcePddLMyPB31L3PX/X3wq7JPre2nSYrS2qpWQ4c68FIwd7Bohuupl03sXSxUGXbKfa4CyAlPkUmbf+cAJg492lzdT2Kk0eeIOeEkv6ZIgl4IENsf8Q3n0pPwdHWWL61QHBIaCilGlaLhQzhj6phTy5rS/KM65D0nbK9Rbz5k2zCAnzS6j4EN8qVzmBg44dYckAMxgyf8Zkww/PGuOMfI2DqyuMgeihnQ8CpbINGTwm2lFr1+ztUrJ4azqEpgtmNWm30EjdQoFRDtePWBQaYiCHjic0JvJE5rxPw5Km2JEawuAFRvXFVu9H19spCljHjin4nEVjm4fiykWwTFC1q3gG5/NEFgzR/xs0uwyeDU0FNNc3V7PFH999seNtVsEVCZviHiRHiiKtLl0uUJi+ZGkEZNQYJG9RPcth1+b8EE/Dgb9/FZyIGxw6YD2xbgWDabu+SeISDY+LoaR8V7kTbN8cuNUQaylqDquwisCj2B66Cu+trV2eebYrCNnFyljI+VvOvsMV2HoYSQHfnqxQvki9GdxE8Tfxl3orCHygzSKLwa43wbb4tqQbc4G0iPYZN1Q3OLyery60PhBPRyhNHQ+iei3fCCvtRQaolmUdKAKIzS2AID4lSK6iPvNQ1+PC7IDwEc9x56nHVNVKiygxz/sTOdeT+bYKMQyP5XdjdxnFpKWMnO6KCT5UOsl3sRwtvIc+rlUuydwecb2hi2WE5p3C2NhmvdRhrIlctsoHUcl7yc62mVwDjHrAAfn5Pajc2mc1trxui/MYaJDNL8q62z2SvJF0bKKr4mB0+IpY7yHI6XfHWy6e7jSHrSxeeOCD8Fu1Ry+mQrfzDWTD5LeQjVcBmjjNHV3/CzzRo4+jHdQXjaz6ZMQVnkzgn5M7fWXd4MHtbXbNGPUCPrlOJvCsyddVD02Lqlx94PBJ6iZUV97R0ovMAodZfO5pNNmGDM7dPE1sV4OGT/U2d1rVBrBPgwuzrgHdqMenB0WKUd888xeROgV9X5vpaXfdAugjH8N8tSAyHY/31PxbTUgniPQjw5O0IZKaj9pirHc0kSf1hjusmb/QTEBglGbB9sb3Y9U5i8l8u8JUhjOgAsKafCu9pcsDB0FbdBcBR6RvYUQpSc5mbC9gky09THl0Ezam+StP0Gut7VjAsWoe2Z6yGFrsyIHzu2RNH+58Nx5C17H6rnciOiHG7Uryo+8CIK87lHtkarbM6InjqRFep1iCmmFSJiZDg/6bkyZCDi89mIJmL0NaG/QP7ku+cK5wyq4Hsg998QPDfFCCTyc5ih8SihH/7D5TCEDXuD17WMvT+1Wp1zPzKGzKMH7LbktSob0+2dbruzxfKgfrx33Ww2ew7pFxw0W5pRJ7SCGfP4WOBvID74pTpZRVwF67qCHBHEA6H1a8sBjHixULU4BBlnuhSIqqnecNyzlyv0XXob0aNScPtYgqUW7Tssf9QCPM95o9dAXgRvrY2qLgRMSDfBc/PLlnZWbhfqdbdfB7GJlwqbpdIQ8I1otKuOwPHeeGH4YuAoK0L4JHj7n38ZtYhJHWGnQcotkXs5jnib23n3lz4SwlY37w9aSkS1h8IDAqj3vjaEzCAgB6CW8ncA7WxPH5EGNmt3L0/OysUD2JZKc6ro5QUSYx97KSMcmJCh6YCN2SVvx5luNU7NcATCet9ewXT5juVvO0h+Bjs8HWcK7cvW7AA7imxTwhmCdt5ofYBa8wIimluLO1OvsrYhi0u+GXVoB9R6jRZw6N+LHCPvexL8gSVSV+/cJZAW7sHeRWtqGvbeKWHngJzPsXl4TQHHaI1Jq65pIQ8MHVMrhAzanvszADPsMTpsUCAZ+F4GHD8aVB5ekosqI5A==",
+      "awsiot.public.key": "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"
+    }
+  }
+}

deployments/mosquitto/templates/configmap.yaml

@@ -11,3 +11,17 @@ data:
 
     log_dest stdout
     allow_anonymous true
+
+    connection awsiot
+    address a2r45j733id3jo-ats.iot.eu-central-1.amazonaws.com:8883
+    topic shellies/+/relay/+/power out 1
+    topic shellies/+/relay/+/energy out 1
+    bridge_insecure false
+    cleansession true
+    clientid bridgeawsiot
+    start_type automatic
+    notifications false
+    log_type all
+    bridge_cafile /etc/mosquitto/certs/awsiot/awsiot.ca.pem
+    bridge_certfile /etc/mosquitto/certs/awsiot/awsiot.cert.crt
+    bridge_keyfile /etc/mosquitto/certs/awsiot/awsiot.private.key

deployments/mosquitto/templates/deployment.yaml

@@ -50,10 +50,16 @@ spec:
               mountPath: /mosquitto/config/mosquitto.conf
               subPath: mosquitto.conf
               readOnly: true
+            - name: certs
+              readOnly: true
+              mountPath: /etc/mosquitto/certs/awsiot
       volumes:
         - name: config
           configMap:
             name: {{ include "mosquitto.fullname" . }}
+        - name: certs
+          secret:
+            secretName: awsiot-certificates
       {{- with .Values.nodeSelector }}
       nodeSelector:
         {{- toYaml . | nindent 8 }}

seal-awsiotbridge-certificates.sh

@@ -0,0 +1,29 @@
+#!/bin/bash
+set -e +x
+
+echo Trying to find the AWS IOT Certificates ... 1>&2
+[ ! -f .secrets/awsiot.ca.pem ] && echo .ssh/awsiot.cert.pem does not exist 1>&2 && exit 1
+[ ! -f .secrets/awsiot.cert.crt ] && echo .ssh/awsiot.cert.crt does not exist 1>&2 && exit 1
+[ ! -f .secrets/awsiot.public.key ] && echo .ssh/awsiot.public.key does not exist 1>&2 && exit 1
+[ ! -f .secrets/awsiot.private.key ] && echo .ssh/awsiot.private.key does not exist 1>&2 && exit 1
+
+echo Sealing certificates/keys into secret ... 1>&2
+
+kubeseal > deployments/mosquitto/templates/awsiot.sealed.json << EOF
+apiVersion: v1
+kind: Secret
+metadata:
+  name: awsiot-certificates
+  namespace: mosquitto
+data:
+  awsiot.ca.pem: |
+$(cat .secrets/awsiot.ca.pem | base64 | sed 's/^/    /')
+  awsiot.cert.crt: |
+$(cat .secrets/awsiot.cert.crt | base64 | sed 's/^/    /')
+  awsiot.public.key: | 
+$(cat .secrets/awsiot.public.key | base64 | sed 's/^/    /')
+  awsiot.private.key: |
+$(cat .secrets/awsiot.private.key | base64 | sed 's/^/    /')
+EOF
+
+echo Secrets are sealed 1>&2