search

strimzi / strimzi-kafka-operator

Apache Kafka® running on Kubernetes
https://strimzi.io/
Apache License 2.0
4.8k stars 1.28k forks source link

`KafkaExporter`, `CruiseControl` and `EntityOperator` pods are rolled on clients CA renewal #5810

Closed im-konge closed 2 years ago

im-konge commented 2 years ago

Describe the bug When doing clients CA renewal, only Kafka pods should be rolled, but RU will start also for EntityOperator, KafkaExporter and CruiseControl.

To Reproduce Steps to reproduce the behavior:

  1. Deploy Kafka cluster together with CruiseControl & KafkaExporter
  2. You can trigger cert renewal with annotation - strimzi.io/force-replace with true value on clients CA secret
  3. Check that after RU of Kafka pods, EO, CC, KE will be rolled

Expected behavior EO, CC and KE will not be rolled

Environment (please complete the following information):

scholzj commented 2 years ago

When fixing this, the commented code in SecurityST should be uncommented again.