This article is only relevant for v0.9.10 and later.

Enable RBAC for the MQTT Broker

This page describes how to enable Role-Based Access Control (RBAC) for the MQTT broker.

2 minute read

Enable RBAC

Now all MQTT connections require password authentication with the following defaults:

Open UMHLens / OpenLens
Navigate to Workloads > Pods.
Select the united-manufacturing-hub-hivemqce-0 Pod.
Click the Pod Shell button to open a shell in the container.
Navigate to the installation directory of the RBAC extension.
```
cd extensions/hivemq-file-rbac-extension/
```
Generate a password hash with this command.
```
java -jar hivemq-file-rbac-extension-<version>.jar -p <password>
```
- Replace <version> with the version of the HiveMQ CE extension. If you are not sure which version is installed, you can press Tab after typing java -jar hivemq-file-rbac-extension- to autocomplete the version.
- Replace <password> with your desired password. Do not use any whitespaces.
Copy the output of the command. It should look similar to this:
```
$2a$10$Q8ZQ8ZQ8ZQ8ZQ8ZQ8ZQ8Zu
```
Navigate to Config > ConfigMaps.
Select the united-manufacturing-hub-hivemqce-extension ConfigMap.
Click the Edit button to open the ConfigMap editor.
In the data.credentials.xml section, replace the strings inbetween the <password> tags with the password hash generated in step 7.
You can use a different password for each different microservice. Just remember that you will need to update the configuration in each one to use the new password.
Click Save to apply the changes.
Go back to Workloads > Pods and select the united-manufacturing-hub-hivemqce-0 Pod.
Click the Delete button to delete the Pod.