stackabletech / zookeeper-operator

A tool that can be used to deploy and manager Apache ZooKeeper clusters/ensembles
Other
26 stars 8 forks source link

Replace upstream "FIPS mode" with more fine-grained TLS hostname verification options #829

Open nightkr opened 4 months ago

nightkr commented 4 months ago

https://github.com/stackabletech/zookeeper-operator/issues/760 was closed now that FIPS mode is on by default, disabling all ZK-specific TLS verification. That's a pretty blunt tool, so we opened https://github.com/apache/zookeeper/pull/2173 to add a more fine-grained option to control what we need. If that is merged then we should integrate it on our end.