Uploaded image for project: 'Kafka'
  1. Kafka
  2. KAFKA-10731

have kafka producer & consumer auto-reload ssl certificate

    XMLWordPrintableJSON

    Details

    • Type: Improvement
    • Status: Open
    • Priority: Major
    • Resolution: Unresolved
    • Affects Version/s: 2.3.1
    • Fix Version/s: None
    • Component/s: security
    • Labels:
      None

      Description

      We use SSL in both brokers and kafka clients for authenticate and authorization, and rotates the certificates every 12 hours.  Kafka producers and consumer cannot pick up the rotated certs. This causes stream processing interruption (e.g.  flink connector does not handle ssl exception, and the flink applicatoin has to be restarted when we hit this error).  We need to improve kafka producer & client to support ssl certificate dynamic loading. 

        Attachments

          Activity

            People

            • Assignee:
              Unassigned
              Reporter:
              yuyang08 Yu Yang
            • Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

              • Created:
                Updated: