Configure data flow endpoints for Microsoft Fabric Real-Time Intelligence

1. In the IoT Operations experience portal, select the Data flow endpoints tab.

2. Under Create new data flow endpoint, select Microsoft Fabric Real-Time Intelligence > New.

3. Enter the following settings for the endpoint.

   

   Setting	Description
   Name	The name of the data flow endpoint.
   Host	The hostname of the event stream custom endpoint in the format *.servicebus.windows.net:9093. Use the bootstrap server address noted previously.
   Authentication method	SASL is currently the only supported authentication method.
   SASL type	Choose Plain
   Synced secret name	Enter a name for the synced secret. A Kubernetes secret with this name is created on the cluster.

   Select Add reference to create a new or choose an existing Key Vault reference for the username and password references.

   For Username reference of token secret, the secret value must be exactly the literal string $ConnectionString not an environmentent variable reference.

   

   For Password reference of token secret, the secret value must be the connection string with the primary key from the event stream custom endpoint.

   

4. Select Apply to provision the endpoint.

Create a Bicep .bicep file with the following content.

kafkaSettings: {
  authentication: {
    method: 'Sasl' // Or ScramSha256, ScramSha512
    saslSettings: {
      saslType: 'Plain' // Or ScramSha256, ScramSha512
      secretRef: '<SECRET_NAME>'
    }
  }
}

Then, deploy via Azure CLI.

az deployment group create --resource-group <RESOURCE_GROUP> --template-file <FILE>.bicep

kubectl create secret generic sasl-secret -n azure-iot-operations \
  --from-literal=token='<YOUR_SASL_TOKEN>'

Create a Kubernetes manifest .yaml file with the following content.

kafkaSettings:
  authentication:
    method: Sasl
    saslSettings:
      saslType: Plain # Or ScramSha256, ScramSha512
      secretRef: <SECRET_NAME>

Then apply the manifest file to the Kubernetes cluster.

kubectl apply -f <FILE>.yaml