search

yahoo / CMAK

CMAK is a tool for managing Apache Kafka clusters
Apache License 2.0
11.84k stars 2.5k forks source link

How to connect with Zookeeper 3.5.7 with mTLS #773

Open tanuj83 opened 4 years ago

tanuj83 commented 4 years ago

my Zookeeper for CMAK is running 3.5.7 with mTLS, how can I connect CMAK to ZK the basic requirement for CMAK run before adding any cluster.

cmak.zkhosts ==> this ZK is using mTLS

application.conf cmak.zkhosts="kafka-manager-zookeeper:2181" cmak.zkhosts=${?ZK_HOSTS}

I tried to configure keystore/truststore in default/cmak and consumer.config too but getting handshake error in ZK logs

tanuj83 commented 4 years ago

Also can not add cluster where ZK is SSL only, how to add that cluster in CMAK

ndobbs commented 4 years ago

Same issues here - now that zookeeper supports inter-broker SSL and TLS, this will be a standard configuration for many people moving forward.

https://cwiki.apache.org/confluence/display/KAFKA/KIP-515%3A+Enable+ZK+client+to+use+the+new+TLS+supported+authentication

techguy0079 commented 4 years ago

we are using Kafka 2.5 and ZK 3.5.7 . mutual TLS for Kafka seems to be working fine but CMAK doesn't support TLS for ZK connections. We are not using any SASL authentication instead using end to end mutual TLS. will CMAK be updated to support TLS connection to ZK cluster?

abhinav-jain09 commented 4 years ago

same issue here . we would like to use only mutual TLS not the SASL authentication with zookeeper broker connection to zookeeper works but not CMAK . is there any plan to implement it?

siva626 commented 4 years ago

+1