Closed nasark closed 11 months ago
@bdunne how is this done for other services like postgres/memcached? I don't think there are extra manual steps for those?
@agrare they use the cert-generator script https://github.com/ManageIQ/manageiq-pods/blob/master/tools/cert_generator.rb. Kafka uses keystores for SSL which require the use of keytool
and so I provided manual steps. We could add a script that does this instead perhaps?
Kafka does support PEM
format but the keys generated by the cert-generator script are in PKSC#1
whereas Kafka uses PKSC#8
and I was not able to make the conversion
This pull request has been automatically marked as stale because it has not been updated for at least 3 months.
If these changes are still valid, please remove the stale
label, make any changes requested by reviewers (if any), and ensure that this issue is being looked at by the assigned/reviewer(s)
Thank you for all your contributions! More information about the ManageIQ triage process can be found in the triage process documentation.
@miq-bot remove_label stale
This pull request has been automatically marked as stale because it has not been updated for at least 3 months.
If these changes are still valid, please remove the stale
label, make any changes requested by reviewers (if any), and ensure that this issue is being looked at by the assigned/reviewer(s)
Thank you for all your contributions! More information about the ManageIQ triage process can be found in the triage process documentation.
This is no longer applicable as we have moved to using strimzi
internal-certificates-secret
in order to use SSL with KafkaDepends on:
Needed for:
Ref:
@miq-bot assign @bdunne @miq-bot add_reviewer @Fryguy @miq-bot add_label enhancement