add ACL config

ConfigMap.yaml

@@ -15,6 +15,7 @@ data:
 
     password_file /mosquitto/secrets/passwd
     allow_anonymous false
+    acl_file /mosquitto/config/acl.conf
     
     # MQTT over TLS
     listener 8883

deployment.yaml

@@ -30,6 +30,10 @@ spec:
         - mountPath: /mosquitto/certs
           name: tls-certs
           readOnly: true
+        - mountPath: /mosquitto/config/acl.conf
+          name: acl
+          subPath: acl
+          readOnly: true  
       volumes:
       - name: config
         configMap:
@@ -43,3 +47,6 @@ spec:
       - name: tls-certs
         secret:
           secretName: mosquitto-tls    
+      - name: acl
+        secret:
+          secretName: mosquitto-acl                  

mosquitto-acl-secret.yaml

@@ -0,0 +1,13 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: mosquitto-acl
+  namespace: mosquitto
+type: Opaque
+stringData:
+  acl: |
+    user pubuser
+    topic readwrite #
+
+    user subuser
+    topic read #

mosquitto-passwd-secret.yaml

@@ -5,4 +5,4 @@ metadata:
   namespace: mosquitto
 type: Opaque
 data:
-  passwd: bW9zcXVpdHRvOiQ3JDEwMSRUQXFxNU0rZUhpNzNDK3ZrJEV3Yy9hWWs3Z1I2R3lqWDBVL0d1aGxYOEVVVlQvSDBQRjd5STlWbS9VaUZjR2I3THpCcWVMa0dZQUIzcjhNWXR2dEJDL0hMUlBCL1FUZ1JVanhudDN3PT0=
+  passwd: cHVidXNlcjokNyQxMDEkNVpqdWxBaTdRS1dMRk1XRiRhM3VJeExDeVBaaTVJS3J4U2NTWGVSeiswLzVVbzFjSzJzb1E1WEphNFE0allXeTNXUFVlTUdiWjR1ZzBuM1hsTHVaekdncS9YcHBZNHN0OXlNd2Q4Zz09CnN1YnVzZXI6JDckMTAxJDEyc3BWb3JmeEJKdGVHdVQkanh0RlFFWVRaRnEyUjZ2elFuYysreXR1R2FId3IwdzNqTDVGdk1MMlBWVXEvSlQyczRZR2hnWUJ6V2NBVE5oUi9SZFN3bU1jd2l2N3MzUnZpSWdlcnc9PQ==