This is an automated email from the ASF dual-hosted git repository. liaoxin pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf/doris-website.git
The following commit(s) were added to refs/heads/master by this push: new e68b50c76a8 [opt](routine-load) add sasl example (#2428) e68b50c76a8 is described below commit e68b50c76a88e5e0b5e4bbb38c4e392660a2a398 Author: Mingyu Chen (Rayner) <morning...@163.com> AuthorDate: Thu May 29 22:15:56 2025 +0800 [opt](routine-load) add sasl example (#2428) --- .../import/import-way/routine-load-manual.md | 24 ++++++++++++++++++++++ .../import/import-way/routine-load-manual.md | 24 ++++++++++++++++++++++ .../import/import-way/routine-load-manual.md | 24 ++++++++++++++++++++++ .../import/import-way/routine-load-manual.md | 24 ++++++++++++++++++++++ .../import/import-way/routine-load-manual.md | 24 ++++++++++++++++++++++ .../import/import-way/routine-load-manual.md | 24 ++++++++++++++++++++++ 6 files changed, 144 insertions(+) diff --git a/docs/data-operate/import/import-way/routine-load-manual.md b/docs/data-operate/import/import-way/routine-load-manual.md index 438d2e8731d..17a7a86935b 100644 --- a/docs/data-operate/import/import-way/routine-load-manual.md +++ b/docs/data-operate/import/import-way/routine-load-manual.md @@ -1750,6 +1750,30 @@ FROM KAFKA ); ``` +## Connect to the SASL Kafka service + +Here we take accessing the StreamNative message service as an example: + +``` +CREATE ROUTINE LOAD example_db.test1 ON example_tbl +COLUMNS(user_id, name, age) +FROM KAFKA ( +"kafka_broker_list" = "pc-xxxx.aws-mec1-test-xwiqv.aws.snio.cloud:9093", +"kafka_topic" = "my_topic", +"property.security.protocol" = "SASL_SSL", +"property.sasl.mechanism" = "PLAIN", +"property.sasl.username" = "user", +"property.sasl.password" = "token:eyJhbxxx", +"property.group.id" = "my_group_id_1", +"property.client.id" = "my_client_id_1", +"property.enable.ssl.certificate.verification" = "false" +); +``` + +Note that if the trusted CA certificate path is not configured on the BE side, you need to set `"property.enable.ssl.certificate.verification" = "false"` to not verify whether the server certificate is credible. + +Otherwise, you need to configure the trusted CA certificate path: `"property.ssl.ca.location" = "/path/to/ca-cert.pem"`. + ## More Details Refer to the SQL manual on [Routine Load](../../../sql-manual/sql-statements/data-modification/load-and-export/CREATE-ROUTINE-LOAD). You can also enter `HELP ROUTINE LOAD` in the client command line for more help. diff --git a/i18n/zh-CN/docusaurus-plugin-content-docs/current/data-operate/import/import-way/routine-load-manual.md b/i18n/zh-CN/docusaurus-plugin-content-docs/current/data-operate/import/import-way/routine-load-manual.md index ce4544a6c5c..1d4a565e4f8 100644 --- a/i18n/zh-CN/docusaurus-plugin-content-docs/current/data-operate/import/import-way/routine-load-manual.md +++ b/i18n/zh-CN/docusaurus-plugin-content-docs/current/data-operate/import/import-way/routine-load-manual.md @@ -1758,6 +1758,30 @@ FROM KAFKA ); ``` +## 连接加密认证的 Kafka 服务 + +这里我们以访问 StreamNative 消息服务为例说明: + +``` +CREATE ROUTINE LOAD example_db.test1 ON example_tbl +COLUMNS(user_id, name, age) +FROM KAFKA ( + "kafka_broker_list" = "pc-xxxx.aws-mec1-test-xwiqv.aws.snio.cloud:9093", + "kafka_topic" = "my_topic", + "property.security.protocol" = "SASL_SSL", + "property.sasl.mechanism" = "PLAIN", + "property.sasl.username" = "user", + "property.sasl.password" = "token:eyJhbxxx", + "property.group.id" = "my_group_id_1", + "property.client.id" = "my_client_id_1", + "property.enable.ssl.certificate.verification" = "false" +); +``` + +注意,如果没有在 BE 端配置信任的 CA 证书路径,需设置 `"property.enable.ssl.certificate.verification" = "false"`,不验证服务器证书是否可信。 + +否则,需配置信任的 CA 证书路径:`"property.ssl.ca.location" = "/path/to/ca-cert.pem"`。 + ## 更多帮助 参考 SQL 手册 [Routine Load](../../../sql-manual/sql-statements/data-modification/load-and-export/CREATE-ROUTINE-LOAD)。也可以在客户端命令行下输入 `HELP ROUTINE LOAD` 获取更多帮助信息。 diff --git a/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.1/data-operate/import/import-way/routine-load-manual.md b/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.1/data-operate/import/import-way/routine-load-manual.md index b2ea9be582c..77dc0ae0dc7 100644 --- a/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.1/data-operate/import/import-way/routine-load-manual.md +++ b/i18n/zh-CN/docusaurus-plugin-content-docs/version-2.1/data-operate/import/import-way/routine-load-manual.md @@ -1752,6 +1752,30 @@ FROM KAFKA ); ``` +## 连接加密认证的 Kafka 服务 + +这里我们以访问 StreamNative 消息服务为例说明: + +``` +CREATE ROUTINE LOAD example_db.test1 ON example_tbl +COLUMNS(user_id, name, age) +FROM KAFKA ( + "kafka_broker_list" = "pc-xxxx.aws-mec1-test-xwiqv.aws.snio.cloud:9093", + "kafka_topic" = "my_topic", + "property.security.protocol" = "SASL_SSL", + "property.sasl.mechanism" = "PLAIN", + "property.sasl.username" = "user", + "property.sasl.password" = "token:eyJhbxxx", + "property.group.id" = "my_group_id_1", + "property.client.id" = "my_client_id_1", + "property.enable.ssl.certificate.verification" = "false" +); +``` + +注意,如果没有在 BE 端配置信任的 CA 证书路径,需设置 `"property.enable.ssl.certificate.verification" = "false"`,不验证服务器证书是否可信。 + +否则,需配置信任的 CA 证书路径:`"property.ssl.ca.location" = "/path/to/ca-cert.pem"`。 + ## 更多帮助 参考 SQL 手册 [Routine Load](../../../sql-manual/sql-statements/data-modification/load-and-export/CREATE-ROUTINE-LOAD)。也可以在客户端命令行下输入 `HELP ROUTINE LOAD` 获取更多帮助信息。 diff --git a/i18n/zh-CN/docusaurus-plugin-content-docs/version-3.0/data-operate/import/import-way/routine-load-manual.md b/i18n/zh-CN/docusaurus-plugin-content-docs/version-3.0/data-operate/import/import-way/routine-load-manual.md index e8db1c567c5..aaf87b06cb1 100644 --- a/i18n/zh-CN/docusaurus-plugin-content-docs/version-3.0/data-operate/import/import-way/routine-load-manual.md +++ b/i18n/zh-CN/docusaurus-plugin-content-docs/version-3.0/data-operate/import/import-way/routine-load-manual.md @@ -1752,6 +1752,30 @@ FROM KAFKA ); ``` +## 连接加密认证的 Kafka 服务 + +这里我们以访问 StreamNative 消息服务为例说明: + +``` +CREATE ROUTINE LOAD example_db.test1 ON example_tbl +COLUMNS(user_id, name, age) +FROM KAFKA ( + "kafka_broker_list" = "pc-xxxx.aws-mec1-test-xwiqv.aws.snio.cloud:9093", + "kafka_topic" = "my_topic", + "property.security.protocol" = "SASL_SSL", + "property.sasl.mechanism" = "PLAIN", + "property.sasl.username" = "user", + "property.sasl.password" = "token:eyJhbxxx", + "property.group.id" = "my_group_id_1", + "property.client.id" = "my_client_id_1", + "property.enable.ssl.certificate.verification" = "false" +); +``` + +注意,如果没有在 BE 端配置信任的 CA 证书路径,需设置 `"property.enable.ssl.certificate.verification" = "false"`,不验证服务器证书是否可信。 + +否则,需配置信任的 CA 证书路径:`"property.ssl.ca.location" = "/path/to/ca-cert.pem"`。 + ## 更多帮助 参考 SQL 手册 [Routine Load](../../../sql-manual/sql-statements/data-modification/load-and-export/CREATE-ROUTINE-LOAD)。也可以在客户端命令行下输入 `HELP ROUTINE LOAD` 获取更多帮助信息。 diff --git a/versioned_docs/version-2.1/data-operate/import/import-way/routine-load-manual.md b/versioned_docs/version-2.1/data-operate/import/import-way/routine-load-manual.md index c45634319e1..e1d930fbfa6 100644 --- a/versioned_docs/version-2.1/data-operate/import/import-way/routine-load-manual.md +++ b/versioned_docs/version-2.1/data-operate/import/import-way/routine-load-manual.md @@ -1742,6 +1742,30 @@ FROM KAFKA ); ``` +## Connect to the SASL Kafka service + +Here we take accessing the StreamNative message service as an example: + +``` +CREATE ROUTINE LOAD example_db.test1 ON example_tbl +COLUMNS(user_id, name, age) +FROM KAFKA ( +"kafka_broker_list" = "pc-xxxx.aws-mec1-test-xwiqv.aws.snio.cloud:9093", +"kafka_topic" = "my_topic", +"property.security.protocol" = "SASL_SSL", +"property.sasl.mechanism" = "PLAIN", +"property.sasl.username" = "user", +"property.sasl.password" = "token:eyJhbxxx", +"property.group.id" = "my_group_id_1", +"property.client.id" = "my_client_id_1", +"property.enable.ssl.certificate.verification" = "false" +); +``` + +Note that if the trusted CA certificate path is not configured on the BE side, you need to set `"property.enable.ssl.certificate.verification" = "false"` to not verify whether the server certificate is credible. + +Otherwise, you need to configure the trusted CA certificate path: `"property.ssl.ca.location" = "/path/to/ca-cert.pem"`. + ## More Details Refer to the SQL manual on [Routine Load](../../../sql-manual/sql-statements/data-modification/load-and-export/CREATE-ROUTINE-LOAD). You can also enter `HELP ROUTINE LOAD` in the client command line for more help. diff --git a/versioned_docs/version-3.0/data-operate/import/import-way/routine-load-manual.md b/versioned_docs/version-3.0/data-operate/import/import-way/routine-load-manual.md index 8ff73c303b6..60238c2a9b8 100644 --- a/versioned_docs/version-3.0/data-operate/import/import-way/routine-load-manual.md +++ b/versioned_docs/version-3.0/data-operate/import/import-way/routine-load-manual.md @@ -1742,6 +1742,30 @@ FROM KAFKA ); ``` +## Connect to the SASL Kafka service + +Here we take accessing the StreamNative message service as an example: + +``` +CREATE ROUTINE LOAD example_db.test1 ON example_tbl +COLUMNS(user_id, name, age) +FROM KAFKA ( +"kafka_broker_list" = "pc-xxxx.aws-mec1-test-xwiqv.aws.snio.cloud:9093", +"kafka_topic" = "my_topic", +"property.security.protocol" = "SASL_SSL", +"property.sasl.mechanism" = "PLAIN", +"property.sasl.username" = "user", +"property.sasl.password" = "token:eyJhbxxx", +"property.group.id" = "my_group_id_1", +"property.client.id" = "my_client_id_1", +"property.enable.ssl.certificate.verification" = "false" +); +``` + +Note that if the trusted CA certificate path is not configured on the BE side, you need to set `"property.enable.ssl.certificate.verification" = "false"` to not verify whether the server certificate is credible. + +Otherwise, you need to configure the trusted CA certificate path: `"property.ssl.ca.location" = "/path/to/ca-cert.pem"`. + ## More Details Refer to the SQL manual on [Routine Load](../../../sql-manual/sql-statements/data-modification/load-and-export/CREATE-ROUTINE-LOAD). You can also enter `HELP ROUTINE LOAD` in the client command line for more help. --------------------------------------------------------------------- To unsubscribe, e-mail: commits-unsubscr...@doris.apache.org For additional commands, e-mail: commits-h...@doris.apache.org