[Kafka]: Add configuration support

[shay79il]

Changes

1. kafka-cluster.yaml -
   Add configuration block support
   Added rendering of the configuration block for Kafka listeners,
   enabling nodePort and advertisedHost settings via Helm values.

2. kafka-network-policy.yaml - Targeted Kafka isolation

• Before:
  Default-deny egress policy requiring whitelist for every service (DNS, API server, registry, etc.)

• After:
  Targeted isolation that:
  Restricts Kafka ports (9092-9094) to designated namespace only
  Allows all other egress traffic without explicit whitelist
  Renamed from allow-kafka-access to kafka-isolation

  JIRA

[Copilot]

Pull request overview

Adds additional Helm chart flexibility for Kafka listener configuration, while also updating network egress rules and bumping the chart version.

Changes:

• Add optional per-listener configuration support to the Strimzi Kafka CR template.
• Extend the Kafka RBAC NetworkPolicy egress rules to allow traffic to a registry namespace (ports 5000/80).
• Bump chart version from 0.11.0-rc6 to 0.11.0-rc7.

Reviewed changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated 2 comments.

File	Description
charts/mlrun-ce/templates/kafka/kafka-network-policy.yaml	Adds registry-related egress rules to the Kafka access NetworkPolicy.
charts/mlrun-ce/templates/kafka/kafka-cluster.yaml	Allows passing listener-specific Strimzi configuration blocks from values.
charts/mlrun-ce/Chart.yaml	Chart version bump to reflect changes.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.