### Run Setup Script

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/hybrid/clusterlink-bidirectional/kraft/multi-cluster-sasl-ssl/README.md

Execute the setup script for an interactive, guided deployment of the multi-cluster bidirectional link. The script progresses through multiple phases with user prompts.

```bash
./setup.sh
```

--------------------------------

### Deploy ClusterLink Example

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/hybrid/clusterlink-bidirectional/README.md

Use this script to deploy a bidirectional ClusterLink example. Ensure you have CFK 3.2.0+ and Confluent Platform 7.4+ installed.

```bash
# Choose an example
cd kraft/sasl-ssl

# Deploy everything
./setup.sh

# Validate bidirectional mirroring
./validate.sh

# Cleanup
./teardown.sh
```

--------------------------------

### Example: Get Confluent Cloud Certificates

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/hybrid/clusterlink/ccloud-as-source-cluster/README.md

Example command to retrieve certificates for a specific Confluent Cloud endpoint.

```bash
openssl s_client -showcerts -servername pkc-xxxx.eastus.azure.confluent.cloud -connect pkc-xxxx.eastus.azure.confluent.cloud:443
```

--------------------------------

### Set Tutorial Directory

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/hybrid/clusterlink-bidirectional/zookeeper/sasl-ssl/README.md

Set the TUTORIAL_HOME environment variable to the root directory of the GitHub repository for this example.

```bash
export TUTORIAL_HOME=<Github repo directory>/hybrid/clusterlink-bidirectional/zookeeper/sasl-ssl
```

--------------------------------

### Set Tutorial Directory

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/hybrid/clusterlink-bidirectional/kraft/private-sasl-ssl/README.md

Set the TUTORIAL_HOME environment variable to the root directory of the Github repository for this example.

```bash
export TUTORIAL_HOME=<Github repo directory>/hybrid/clusterlink-bidirectional/kraft/private-sasl-ssl
```

--------------------------------

### Setup Script Commands

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/hybrid/clusterlink-bidirectional/kraft/multi-cluster-sasl-ssl/README.md

Provides a list of commands to run specific phases of the setup process or to check resource status. Use these for interactive control over the deployment.

```bash
./setup.sh              # Run all phases interactively
./setup.sh kraft        # Phase 1 only
./setup.sh kafka        # Phase 2 only
./setup.sh dns          # Phase 3 only
./setup.sh restclass    # Phase 4 only
./setup.sh topics       # Phase 5 only
./setup.sh clusterlink  # Phase 6 only
./setup.sh validate     # Phase 7 only
./setup.sh status       # Show resource status on both clusters

./validate.sh           # Run produce/consume validation
./teardown.sh           # Delete all resources
```

--------------------------------

### Run Setup Script

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/migration/KRaftMigration/multi-region-cluster/kraft-based-cluster/README.md

Execute the setup script to deploy Kraft controllers with TLS enabled and wait for them to be in a running state.

```bash
./setup-kraft.sh
```

--------------------------------

### Install jq on Debian/Ubuntu

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/hybrid/sr-automation-workflow/clean-mode-settings/README.md

Installs the jq command-line JSON processor on Debian or Ubuntu systems using apt-get.

```bash
sudo apt-get install jq
```

--------------------------------

### Set Tutorial Directory

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/security/separate-listener-tls/README.md

Set the TUTORIAL_HOME environment variable to the directory where the Confluent Kubernetes examples repository was downloaded.

```bash
export TUTORIAL_HOME=<Github repo directory>/security/separate-listener-tls
```

--------------------------------

### Download and Install Istio

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/networking/external-access-static-host-based/README.rst

Downloads and installs Istio version 1.9.4. This involves fetching the Istio release and initializing its Custom Resource Definitions using the istioctl tool.

```bash
(cd $TUTORIAL_HOME && \
  curl -L https://istio.io/downloadIstio | ISTIO_VERSION=1.9.4 sh -)
```

```bash
$TUTORIAL_HOME/istio-1.9.4/bin/istioctl operator init
```

--------------------------------

### Install Vault using Helm

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/security/mds-mtls-with-dpic/README.md

Install the Vault server in development mode using the HashiCorp Helm chart into the 'hashicorp' namespace. This is suitable for learning environments.

```bash
$ kubectl create ns hashicorp

$ helm repo add hashicorp https://helm.releases.hashicorp.com
$ helm upgrade --install vault --set='server.dev.enabled=true' hashicorp/vault -n hashicorp
```

--------------------------------

### Set Tutorial Directory

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/blueprints/quickstart-deploy/multi-site-deployment.rst

Set the TUTORIAL_HOME environment variable to the directory of the quickstart-deploy blueprints.

```bash
export TUTORIAL_HOME=<CFK examples directory>/confluent-kubernetes-examples/blueprints/quickstart-deploy
```

--------------------------------

### Clone Confluent Kubernetes Examples Repository

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/README.md

Clones the official Confluent Kubernetes examples repository to your local workstation. This is a prerequisite for running any of the provided scenarios.

```bash
git clone git@github.com:confluentinc/confluent-kubernetes-examples.git
```

--------------------------------

### Install Blueprint

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/blueprints/cp-nonrbac-mtls-lb/README.md

Apply the ConfluentPlatformBlueprint configuration to the 'cpc-system' namespace.

```bash
kubectl apply -f $SCENARIO_BASEPATH/blueprint/blueprint.yaml --namespace cpc-system
```

--------------------------------

### Install CFK Operator with Namespace Management

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/security/openshift-security/README.md

Install the Confluent for Kubernetes (CFK) operator and configure it to manage Custom Resources (CRs) in specified namespaces. This example disables Pod Security Admission for the operator's installation.

```bash
helm upgrade --install confluent-operator confluentinc/confluent-for-kubernetes \
--set podSecurity.enabled=false --set namespaceList="{confluent,confluent-test}" \
--namespace confluent-operator
```

--------------------------------

### Set Tutorial Directory

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/connector/replicator-with-monitoring/README.md

Set the TUTORIAL_HOME environment variable to the directory where the tutorial files are downloaded.

```bash
export TUTORIAL_HOME=<Tutorial directory>/connector/replicator-with-monitoring
```

--------------------------------

### Set Tutorial Directory and Namespace

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/security/mds-mtls-with-dpic/README.md

Export the tutorial home directory and create the 'confluent' namespace for the Confluent Platform deployment.

```bash
$ export TUTORIAL_HOME=<This_Git_repository_directory>/security/mds-mtls-with-dpic
$ kubectl create namespace confluent
```

--------------------------------

### Static KRaft Configuration Example

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/kraft/dynamic-quorum/README.md

This properties configuration defines a fixed list of controller voters for a static KRaft quorum. All nodes must be specified upfront and cannot be changed after the cluster starts.

```properties
# Fixed list of all voters at startup
controller.quorum.voters=100@kraft-central0.example.com:9093,101@kraft-central1.example.com:9093,102@kraft-central2.example.com:9093,200@kraft-east0.example.com:9093,201@kraft-east1.example.com:9093
```

--------------------------------

### Set Tutorial Directory

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/advanced-configuration/pod-overlay/README.md

Set the TUTORIAL_HOME environment variable to the directory where the Github repo was downloaded.

```bash
export TUTORIAL_HOME=<Github repo directory>/advanced-configuration/pod-overlay
```

--------------------------------

### Install Confluent for Kubernetes Operator

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/gateway/authswap-sasl-scram-sasl-plain/README.md

Installs the Confluent for Kubernetes operator in the 'confluent' namespace. Ensure the namespace exists before installation.

```bash
kubectl create namespace confluent
helm upgrade --install confluent-operator confluentinc/confluent-for-kubernetes -n confluent
```

--------------------------------

### Set Tutorial Directory

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/networking/external-access-load-balancer-deploy-ipv6/README.rst

Export the TUTORIAL_HOME environment variable to point to the downloaded tutorial directory for external-access-load-balancer-deploy-ipv6.

```bash
export TUTORIAL_HOME=<Tutorial directory>/external-access-load-balancer-deploy-ipv6
```

--------------------------------

### Install Confluent for Kubernetes Operator

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/hybrid/usmagent/zk/basic_auth/README.md

Installs the Confluent for Kubernetes (CFK) Operator using Helm. Ensure you have Helm installed and configured.

```bash
helm upgrade --install confluent-operator confluentinc/confluent-for-kubernetes --namespace confluent --version 0.1514.1
```

--------------------------------

### Set Tutorial Directory

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/hybrid/clusterlink/non_confluent_source_cluster/README.md

Export the tutorial directory for easy access to configuration files.

```bash
export TUTORIAL_HOME=$PWD/hybrid/clusterlink/non_confluent_source_cluster
```

--------------------------------

### Install Confluent for Kubernetes Operator

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/hybrid/ccloud-schema/README.md

Install the Confluent for Kubernetes operator using Helm. This command upgrades or installs the operator in the 'confluent' namespace.

```bash
helm upgrade --install operator confluentinc/confluent-for-kubernetes --namespace confluent
```

--------------------------------

### Install Flink Kubernetes Operator (FKO)

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/flink/mTLS/Readme.md

Installs the Flink Kubernetes Operator using Helm. Ensure Helm repositories are updated and cert-manager is installed.

```bash
helm repo add confluentinc https://packages.confluent.io/helm
helm repo update
kubectl create -f https://github.com/jetstack/cert-manager/releases/download/v1.8.2/cert-manager.yaml
helm upgrade --install cp-flink-kubernetes-operator confluentinc/flink-kubernetes-operator
```

--------------------------------

### Install Nginx Ingress Controller

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/security/internal_external-tls_mtls_confluent-rbac/README.md

Installs the Nginx Ingress Controller using Helm. This involves adding the Helm repository, updating it, and then performing an upgrade or installation.

```bash
# Add the Kubernetes NginX Helm repo and update the repo
helm repo add ingress-nginx https://kubernetes.github.io/ingress-nginx
helm repo update

# Install the Nginx controller
helm upgrade  --install ingress-nginx ingress-nginx/ingress-nginx
```

--------------------------------

### Set Tutorial Directory and Navigate

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/control-center-next-gen/cp790/tls/README.md

Set the TUTORIAL_HOME environment variable to the directory containing the tutorial files and navigate to it. This is a prerequisite for running subsequent commands.

```bash
export TUTORIAL_HOME=<Tutorial directory>/c3++/cp790/tls
cd $TUTORIAL_HOME
```

--------------------------------

### Clone Repository and Navigate

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/security/fips/tls/README.md

Clones the confluent-kubernetes-examples repository and changes the directory to the specific FIPS TLS example.

```bash
git clone https://github.com/confluentinc/confluent-kubernetes-examples.git

cd confluent-kubernetes-examples/security/fips/tls
```

--------------------------------

### Install jq on macOS

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/hybrid/sr-automation-workflow/clean-mode-settings/README.md

Installs the jq command-line JSON processor on macOS using Homebrew.

```bash
brew install jq
```

--------------------------------

### Set Tutorial Directory

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/blueprints/quickstart-deploy/single-site-deployment.rst

Exports an environment variable pointing to the tutorial's directory within the cloned examples repository. This simplifies referencing configuration files.

```bash
export TUTORIAL_HOME=<CFK examples directory>/blueprints/quickstart-deploy
```

--------------------------------

### Install tfctl CLI

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/selfservice/fluxcd_mtls_cert-manager/README.md

Install the tfctl command-line tool using Homebrew for managing Terraform resources.

```bash
$> brew install weaveworks/tap/tfctl
```

--------------------------------

### Set Tutorial Directory and Navigate

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/control-center-next-gen/cp790/basic_tls/README.md

Sets the TUTORIAL_HOME environment variable and changes the current directory to the tutorial's root. This is a prerequisite for subsequent commands.

```bash
export TUTORIAL_HOME=<Tutorial directory>/c3++/cp790/basic_tls
cd $TUTORIAL_HOME
```

--------------------------------

### Install Confluent for Kubernetes

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/hybrid/replicator-cloud2cloud/README.md

Install Confluent for Kubernetes using Helm, deploying the operator to the 'destination' namespace.

```bash
helm upgrade --install confluent-operator confluentinc/confluent-for-kubernetes --namespace destination
```

--------------------------------

### Set Tutorial Directory

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/connector/hdfs3-sink-connector/README.md

Set the TUTORIAL_HOME environment variable to the directory containing the connector configuration files.

```bash
export TUTORIAL_HOME=<Tutorial directory>/connector/hdfs3-sink-connector
```

--------------------------------

### Example JSON Log Output

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/monitoring/splunk-Logging-stdout/README.md

An example of the JSON log format emitted by the configured Log4j2 appender.

```json
{"severity":"INFO","timestamp":"2026-03-16T13:46:11.435Z","textPayload":"Registered loader: jdk.internal.loader.ClassLoaders$AppClassLoader@7b98f307\n","sourceLocation":{"file":"PluginScanner.java","line":"80","function":"org.apache.kafka.connect.runtime.isolation.PluginScanner"},"thread":"main"}
```

--------------------------------

### Set Tutorial Directory

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/security/autogenerated-tls_only/README.md

Set the TUTORIAL_HOME environment variable to the directory where the Github repo was downloaded. This is used for referencing configuration files.

```bash
export TUTORIAL_HOME=<Github repo directory>/security/autogenerated-tls_only
```

--------------------------------

### Install Confluent Operator Helm Chart

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/monitoring/splunk-Logging-stdout/README.md

Add the Confluent Helm repository and install the Confluent Operator chart.

```bash
helm repo add confluentinc https://packages.confluent.io/helm/charts
helm repo update
helm install confluent-operator confluentinc/confluent-for-kubernetes --namespace confluent
```

--------------------------------

### Set Tutorial Directory

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/security/oauth/client_assertion/day-2/README.md

Export the tutorial directory to the TUTORIAL_HOME environment variable. This is a prerequisite for running the deployment commands.

```bash
export TUTORIAL_HOME=<Tutorial directory>/security/oauth/client_assertion/day-2
```

--------------------------------

### Set Tutorial Home Directory

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/kraft/dynamic-quorum/greenfield/single-cluster/quickstart/README.md

Set the TUTORIAL_HOME environment variable to the directory containing the tutorial resources.

```bash
export TUTORIAL_HOME=<Tutorial directory>/kraft/dynamic-quorum/greenfield/single-cluster/quickstart
```

--------------------------------

### Install Ingress Controller

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/blueprints/cp-nonrbac-saslplain-ingress/README.md

Installs the ingress-nginx controller using Helm, enabling SSL passthrough for external access.

```bash
helm upgrade --install ingress-nginx ingress-nginx --repo https://kubernetes.github.io/ingress-nginx \
     --set controller.publishService.enabled=true \
     --set controller.extraArgs.enable-ssl-passthrough="true"
```

--------------------------------

### Set Tutorial Home Directory

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/kraft/dynamic-quorum/migration/static-to-dynamic/single-cluster/README.md

Set the TUTORIAL_HOME environment variable to the directory containing the tutorial resources.

```bash
export TUTORIAL_HOME=<Tutorial directory>/kraft/dynamic-quorum/migration/static-to-dynamic/single-cluster
```

--------------------------------

### Kafka Configuration Example

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/security/plaintext-basic-auth/README.rst

Example configuration snippet for the Kafka custom resource within a Confluent Platform deployment.

```yaml
---
apiVersion: platform.confluent.io/v1beta1
kind: Kafka
metadata:
  name: kafka
  namespace: operator
spec:
  replicas: 3
  image:

```

--------------------------------

### Set CFK Examples Base Path

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/blueprints/cp-nonrbac-mtls-lb/README.md

Set the SCENARIO_BASEPATH environment variable to the directory containing the CFK examples.

```bash
export SCENARIO_BASEPATH=<CFK examples directory>/confluent-kubernetes-examples/blueprints/cp-nonrbac-mtls-lb
```

--------------------------------

### Set Tutorial Home Directory

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/hybrid/usmagent/plaintext/README.md

Export the TUTORIAL_HOME environment variable to point to the tutorial directory.

```bash
export TUTORIAL_HOME=<Tutorial directory>/hybrid/usmagent/plaintext
```

--------------------------------

### Start Kafka Console Producer

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/networking/external-access-static-host-based/README.rst

Starts the kafka-console-producer utility. Ensure the bootstrap server and topic are correctly configured.

```bash
kafka-console-producer --bootstrap-server kafka.$DOMAIN:443 \
  --topic elastic-0 \
  --producer.config $TUTORIAL_HOME/client/kafka.properties
```

--------------------------------

### Set Tutorial Directory

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/connector/http-sink-connector/README.md

Set the TUTORIAL_HOME environment variable to the directory containing the tutorial files.

```bash
export TUTORIAL_HOME=<Tutorial directory>/connector/http-sink-connector
```

--------------------------------

### Install Confluent for Kubernetes

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/security/oauth/kafka/jaas/Readme.md

Installs the Confluent for Kubernetes operator using Helm. This command deploys the operator to the 'operator' namespace.

```bash
helm upgrade --install operator confluentinc/confluent-for-kubernetes --namespace operator
```

--------------------------------

### Deploy Confluent For Kubernetes (CFK) Operator

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/hybrid/usmagent/basic_auth/README.md

Install the CFK Operator using Helm. Ensure you have Helm installed and configured.

```bash
helm upgrade --install confluent-operator confluentinc/confluent-for-kubernetes --namespace confluent
```

--------------------------------

### Set Tutorial Directory

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/connector/datagen-source-connector/README.md

Set the TUTORIAL_HOME environment variable to the directory containing the tutorial files.

```bash
export TUTORIAL_HOME=<Tutorial directory>/connector/datagen-source-connector
```

--------------------------------

### Install Confluent for Kubernetes

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/hybrid/clusterlink-bidirectional/kraft/basic/README.md

Install Confluent for Kubernetes to watch all namespaces. This is required for bidirectional cluster linking across namespaces.

```bash
helm repo add confluentinc https://packages.confluent.io/helm
helm repo update
kubectl create namespace confluent
helm upgrade --install confluent-operator confluentinc/confluent-for-kubernetes \
  --namespace confluent \
  --set namespaced=false
```

--------------------------------

### Set Tutorial Directory

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/storage/README.md

Set the TUTORIAL_HOME environment variable to the storage directory within your downloaded GitHub repo.

```bash
export TUTORIAL_HOME=<GitHub repo directory>/storage
```

--------------------------------

### Kafka Component Authorization Error Example

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/security/userprovided-tls_mtls_kafka-acls/README.md

Example of a Kafka TopicAuthorizationException seen in component logs, indicating an ACL issue.

```java
[ERROR] 2021-07-27 21:47:16,926 [DistributedHerder-connect-1-1] org.apache.kafka.connect.runtime.distributed.DistributedHerder run - [Worker clientId=connect-1, groupId=confluent.connect] Uncaught exception in herder work thread, exiting:
org.apache.kafka.common.errors.TopicAuthorizationException: Not authorized to access topics: [confluent.connect-offsets]
```

--------------------------------

### Set Tutorial Home Directory

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/hybrid/usmagent/zk/basic_auth_tls/README.md

Export the TUTORIAL_HOME environment variable to point to the directory containing the tutorial configuration files.

```bash
export TUTORIAL_HOME=<Tutorial directory>/hybrid/usmagent/zk/basic_auth_tls
```

--------------------------------

### Set Tutorial Home Directory

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/hybrid/usmagent/tls/README.md

Sets an environment variable to the tutorial directory for easy access to configuration files.

```bash
export TUTORIAL_HOME=<Tutorial directory>/hybrid/usmagent/tls
```

--------------------------------

### Install Cert-Manager

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/security/using-cert-manager/README.md

Install Cert-Manager version v1.0.2 using its official YAML manifest. Note: Confluent does not provide or support Cert-Manager.

```bash
kubectl apply --validate=false -f https://github.com/jetstack/cert-manager/releases/download/v1.0.2/cert-manager.yaml
```

--------------------------------

### Set Tutorial Home Directory

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/hybrid/usmagent/mtls/README.md

Sets an environment variable to the tutorial directory for easy access to configuration files.

```bash
export TUTORIAL_HOME=<Tutorial directory>/hybrid/usmagent/mtls
```

--------------------------------

### Set Tutorial Directory

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/migration/MDSOAuthtoOAuthMtls/README.MD

Set the TUTORIAL_HOME environment variable to the directory where the tutorial files are downloaded. This is used to reference configuration files.

```bash
export TUTORIAL_HOME=<Tutorial directory>/migration/MDSOAuthtoOAuthMtls
```

--------------------------------

### Install ExternalDNS for DNS Management

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/hybrid/multi-region-clusters/external-access/kraft-based-cluster/README.md

Optionally install external-dns to manage DNS records for services. Configure namespace and txtOwnerId for each region.

```bash
helm install external-dns -f external-dns-values.yaml --set namespace=kraft-central,txtOwnerId=mrc-central bitnami/external-dns -n kraft-central --kube-context mrc-central
helm install external-dns -f external-dns-values.yaml --set namespace=kraft-east,txtOwnerId=mrc-east bitnami/external-dns -n kraft-east 
helm install external-dns -f external-dns-values.yaml --set namespace=kraft-west,txtOwnerId=mrc-west bitnami/external-dns -n kraft-west 
```

--------------------------------

### Set Tutorial Directory

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/hybrid/schemalink/basic/README.md

Set the TUTORIAL_HOME environment variable to the directory where tutorial files are downloaded. This is a prerequisite for subsequent commands.

```bash
export TUTORIAL_HOME=<Tutorial directory>/hybrid/schemalink/mtls
```

--------------------------------

### Install Confluent for Kubernetes

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/hybrid/clusterlink-bidirectional/zookeeper/sasl-ssl/README.md

Install Confluent for Kubernetes (CFK) to watch all namespaces, which is required for bidirectional cluster linking across namespaces.

```bash
helm repo add confluentinc https://packages.confluent.io/helm
helm repo update

kubectl create namespace confluent
helm upgrade --install confluent-operator confluentinc/confluent-for-kubernetes \
  --namespace confluent \
  --set namespaced=false
```

--------------------------------

### Install CFK Operator

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/gateway/license-configuration/README.md

Installs the Confluent for Kubernetes (CFK) operator. Ensure Helm repositories are updated and the 'confluent' namespace exists.

```shell
# Add Confluent Helm repo
helm repo add confluentinc https://packages.confluent.io/helm
helm repo update

# Create namespace
kubectl create namespace confluent

# Install operator
helm upgrade --install confluent-operator 
  confluentinc/confluent-for-kubernetes -n confluent

# Verify installation
kubectl get pods -n confluent
```

--------------------------------

### Set Tutorial Directory

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/security/mds-mtls/README.md

Set the TUTORIAL_HOME environment variable to the directory where the tutorial files were downloaded. This is used for referencing certificate paths.

```bash
export TUTORIAL_HOME=<Tutorial directory>/mds-mtls
```

--------------------------------

### Set Tutorial Directory

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/hybrid/clusterlink-bidirectional/zookeeper/basic/README.md

Set the TUTORIAL_HOME environment variable to the root directory of the tutorial repository.

```bash
export TUTORIAL_HOME=<Github repo directory>/hybrid/clusterlink-bidirectional/zookeeper/basic
```

--------------------------------

### Install Confluent for Kubernetes Operator

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/connector/datagen-source-connector/README.md

Install the Confluent for Kubernetes operator using Helm. This operator manages Confluent Platform deployments.

```bash
helm upgrade --install operator confluentinc/confluent-for-kubernetes -n confluent
```

--------------------------------

### Set Tutorial Directory

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/hybrid/clusterlink-bidirectional/zookeeper/private-sasl-ssl/README.md

Set the TUTORIAL_HOME environment variable to the root directory of the tutorial repository.

```bash
export TUTORIAL_HOME=<Github repo directory>/hybrid/clusterlink-bidirectional/zookeeper/private-sasl-ssl
```

--------------------------------

### Deploy Confluent for Kubernetes (CFK)

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/connector/http-sink-connector/README.md

Install Confluent for Kubernetes using Helm. This command upgrades or installs the confluent-operator in the 'confluent' namespace.

```bash
helm upgrade --install confluent-operator \
  confluentinc/confluent-for-kubernetes \
  --namespace confluent
```

--------------------------------

### Install Confluent for Kubernetes using Helm

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/security/control-center-sso/README.md

Install the Confluent for Kubernetes operator using Helm. Ensure kRaft is enabled and specify the namespace.

```bash
helm upgrade --install operator confluentinc/confluent-for-kubernetes --set kRaftEnabled=true -n confluent
```

--------------------------------

### Set Tutorial Directory

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/connector/replicator-source-connector/README.md

Set the TUTORIAL_HOME environment variable to the directory containing the tutorial files.

```shell
export TUTORIAL_HOME=<Tutorial directory>/connector/replicator-source-connector
```

--------------------------------

### Set Tutorial Directory

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/security/oauth/connectors/README.md

Set the TUTORIAL_HOME environment variable to the directory where the tutorial files were downloaded. This is used for referencing configuration and credential files.

```bash
export TUTORIAL_HOME=<Tutorial directory>/security/oauth/connectors
```

--------------------------------

### Install Confluent For Kubernetes

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/hybrid/multi-region-clusters/external-access/zookeeper-based-cluster/README.md

Installs the Confluent for Kubernetes operator in different regions using Helm. Ensure the `values.yaml` file is updated with your domain.

```bash
# Set up the Helm Chart
helm repo add confluentinc https://packages.confluent.io/helm

# Install Confluent For Kubernetes
helm upgrade --install cfk-operator confluentinc/confluent-for-kubernetes -n central --values $TUTORIAL_HOME/values.yaml --kube-context mrc-central
helm upgrade --install cfk-operator confluentinc/confluent-for-kubernetes -n east --values $TUTORIAL_HOME/values.yaml --kube-context mrc-east
helm upgrade --install cfk-operator confluentinc/confluent-for-kubernetes -n west --values $TUTORIAL_HOME/values.yaml --kube-context mrc-west
```

--------------------------------

### Install Confluent for Kubernetes Operator

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/gateway/authswap-sasl-plain-none/README.md

Installs the Confluent for Kubernetes operator using Helm. This operator manages Confluent components within your cluster.

```bash
helm upgrade --install confluent-operator confluentinc/confluent-for-kubernetes -n confluent
```

--------------------------------

### Set Tutorial Directory

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/security/plaintext-basic-auth/README.rst

Set the TUTORIAL_HOME environment variable to the root directory of the tutorial.

```bash
export TUTORIAL_HOME=<Tutorial directory>/security/plaintext-basic-auth
```

--------------------------------

### Set Tutorial Directory

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/hybrid/clusterlink-bidirectional/kraft/sasl-ssl/README.md

Sets the TUTORIAL_HOME environment variable to the current tutorial directory.

```bash
export TUTORIAL_HOME=<Github repo directory>/hybrid/clusterlink-bidirectional/kraft/sasl-ssl
```

--------------------------------

### Install Confluent Operator in Data Plane

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/blueprints/quickstart-deploy/multi-site-deployment.rst

Install the Confluent for Kubernetes (CFK) Helm chart in the Data Plane cluster in cluster mode.

```bash
helm upgrade --install confluent-operator confluentinc/confluent-for-kubernetes \
  --set namespaced="false" \
  --kube-context data-plane \
  --namespace cpc-system
```

--------------------------------

### Install Confluent Operator Helm Chart

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/blueprints/quickstart-deploy/multi-site-deployment.rst

Install the Confluent for Kubernetes (CFK) Helm chart in the 'cpc-system' namespace on the Control Plane cluster.

```bash
helm upgrade --install confluent-operator confluentinc/confluent-for-kubernetes \
  --set namespaced="false" \
  --kube-context control-plane \
  --namespace cpc-system
```

--------------------------------

### Set Tutorial Home Directory

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/kraft/dynamic-quorum/greenfield/mrc/2dc-greenfield-loadbalancer/README.md

Set the TUTORIAL_HOME environment variable to the root directory of the tutorial.

```bash
export TUTORIAL_HOME=<Tutorial directory>/kraft/dynamic-quorum/greenfield/mrc/2dc-greenfield-loadbalancer
```

--------------------------------

### Set Tutorial Home Directory

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/kraft/dynamic-quorum/migration/static-to-dynamic/mrc/README.md

Set the TUTORIAL_HOME environment variable to the root directory of the tutorial.

```bash
export TUTORIAL_HOME=<Tutorial directory>/kraft/dynamic-quorum/migration/static-to-dynamic/mrc
```

--------------------------------

### Install Orchestrator Helm Chart

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/blueprints/quickstart-deploy/multi-site-deployment.rst

Install the Confluent for Kubernetes (CFK) Orchestrator Helm chart in the 'cpc-system' namespace on the Control Plane cluster.

```bash
helm repo add confluentinc https://packages.confluent.io/helm
helm repo update
```

```bash
helm upgrade --install cpc-orchestrator confluentinc/cfk-blueprint \
  --set orchestrator.enabled=true \
  --namespace cpc-system \
  --kube-context control-plane
```

--------------------------------

### Set Tutorial Home Directory

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/kraft/dynamic-quorum/migration/zk-to-kraft/single-cluster/README.md

Set the TUTORIAL_HOME environment variable to the root directory of the tutorial.

```bash
export TUTORIAL_HOME=<Tutorial directory>/kraft/dynamic-quorum/migration/zk-to-kraft/single-cluster
```

--------------------------------

### Install Vault with Helm

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/security/configure-with-vault/README.md

Install the Vault server in development mode using the official Helm chart. This is suitable for learning environments but not recommended for production.

```shell
kubectl create ns hashicorp

helm repo add hashicorp https://helm.releases.hashicorp.com
helm upgrade --install vault --set='server.dev.enabled=true' hashicorp/vault -n hashicorp
```

--------------------------------

### Install Splunk OpenTelemetry Collector Helm Chart

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/monitoring/splunk-Logging-stdout/README.md

Install the Splunk OpenTelemetry Collector using Helm, specifying the namespace and custom values file.

```bash
helm -n observability install splunk-otel \
  -f $TUTORIAL_HOME/splunkValues.yaml \
  splunk-otel-collector-chart/splunk-otel-collector
```

--------------------------------

### Set Tutorial Directory

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/security/oauth/client_assertion/rbac/README.md

Set the TUTORIAL_HOME environment variable to the security/oauth/client_assertion/rbac directory for this tutorial.

```bash
export TUTORIAL_HOME=<Tutorial directory>/security/oauth/client_assertion/rbac
```

--------------------------------

### Set Tutorial Directory

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/security/plaintext-basic-auth-Connect/README.rst

Set the TUTORIAL_HOME environment variable to the root directory of the tutorial files.

```bash
export TUTORIAL_HOME=<Tutorial directory>/security/plaintext-basic-auth-Connect
```

--------------------------------

### Install Grafana using Helm

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/monitoring/grafana-dashboard/README.md

Installs the Grafana visualization tool using the Grafana Helm chart. This command deploys Grafana into the 'default' namespace.

```bash
helm upgrade --install grafana grafana/grafana --namespace default
```

--------------------------------

### Set the current tutorial directory

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/security/control-center-sso/README.md

Set the TUTORIAL_HOME environment variable to the directory where the tutorial files were downloaded. This is used for referencing other files in the tutorial.

```bash
export TUTORIAL_HOME=<Tutorial directory>/security/control-center-sso
```

--------------------------------

### Install Confluent for Kubernetes (Non-Namespaced)

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/hybrid/clusterlink-bidirectional/zookeeper/basic/README.md

Install Confluent for Kubernetes (CFK) to watch all namespaces, which is required for bidirectional cluster linking across different namespaces.

```bash
kubectl create namespace confluent
helm upgrade --install confluent-operator confluentinc/confluent-for-kubernetes \
  --namespace confluent \
  --set namespaced=false
```

--------------------------------

### Kafka Broker Audit Log Example

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/security/userprovided-tls_mtls_kafka-acls/README.md

Example of a Kafka broker audit log message showing a principal being denied an operation due to authorization.

```text
[INFO] 2021-07-27 21:41:33,793 [data-plane-kafka-request-handler-7] kafka.authorizer.logger logAuditMessage - Principal = User:sr is Denied Operation = Describe from host = 10.124.4.50 on resource = Topic:LITERAL:_confluent-license
```

--------------------------------

### Set Tutorial Directory

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/migration/MDSLdaptoLdapMtls/README.MD

Set the TUTORIAL_HOME environment variable to the directory where the tutorial files were downloaded. This is used for referencing other files in the tutorial.

```bash
export TUTORIAL_HOME=<Tutorial directory>/migration/MDSLdaptoLdapMtls
```

--------------------------------

### Set Tutorial Directory

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/security/oauth/client_assertion/clusterlinking/README.md

Set the TUTORIAL_HOME environment variable to the directory containing the tutorial files. This is a prerequisite for running the subsequent commands.

```bash
export TUTORIAL_HOME=<Tutorial directory>/security/oauth/client_assertion/clusterlinking
```

--------------------------------

### Set Tutorial Home Directory

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/security/oauth/keycloak/Readme.md

Set the TUTORIAL_HOME environment variable to the directory where the Keycloak tutorial files are located.

```bash
export TUTORIAL_HOME= <Tutorial directory>/security/oauth/keycloak
```

--------------------------------

### Set Tutorial Directory

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/migration/MDSLdapMtlstoMtls/README.MD

Set the TUTORIAL_HOME environment variable to the directory where the tutorial files were downloaded. This is used for referencing other files within the tutorial.

```bash
export TUTORIAL_HOME=<Tutorial directory>/migration/MDSLdapMtlstoMtls
```

--------------------------------

### Install Nginx Ingress Controller with SSL Passthrough

Source: https://github.com/confluentinc/confluent-kubernetes-examples/blob/master/networking/external-access-static-host-based/README.rst

Installs the Nginx Ingress controller, enabling SSL passthrough for handling Kafka's SSL handshake.

```bash
helm upgrade  --install ingress-nginx ingress-nginx/ingress-nginx \
  --set controller.extraArgs.enable-ssl-passthrough="true"
```