[KAFKA-12799] Extend TestSecurityRollingUpgrade system test to KRaft

• Type: Test
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Component/s: system tests
• Assignee: Unassigned
• Reporter: Ron Dagostino
• Created: 17/May/21 15:05
• Updated: 17/May/21 15:05

Description

The TestSecurityRollingUpgrade system test rolls Kafka brokers multiple times to adjust listeners/inter-broker listeners while confirming that producers and consumers continue to work throughout the multiple rolls. We need to extend this test (or write a new one) that does something similar for the KRaft controllers. Producers/consumers are perhaps less appropriate in such a case – maybe we need to create a topic after each roll to make sure the metalog is being consumed correctly?

Note that this will require some logic in `KafkaService.security_config()` because we cache the security config and we will have to mutate it to get the changes to occur. See https://github.com/apache/kafka/pull/10694/ for what we had to do for Kafka broker changes; something similar will have to happen for controller changes.