Hi, Thanks for the KIP, it seems a useful improvement. I guess this would supersede KIP-687.
The KIP is a bit light on details. - Can you provide the description and default value for the new configuration? - The KIP explicitly mentions brokers, consumer and producers, I assume it also covers admin clients (and controllers)? - The KIP states "To prevent redundant reconfigurations, a quiet period is enforced across watched files". How long is this period? Is it configurable? - I'm unsure about the configuration name. Have you considered alternative like "ssl.auto.reload" or "ssl.stores.auto.reload"? Thanks, Mickael On Thu, Dec 5, 2024 at 6:28 PM Moncef Abboud <moncef.abbou...@gmail.com> wrote: > > Hi Gaurav, > > Thank you for your reply. > > There is some overlap between the two. However, while KIP-687 focuses > primarily on brokers, this KIP targets consumers and producers, with > additional benefits for brokers. > > Best, > Moncef > > On Thu, Dec 5, 2024, 10:38 AM Gaurav Narula <ka...@gnarula.com> wrote: > > > Hi Moncef, > > > > Thank you for the KIP. It seems very similar in spirit to KIP-687 ( > > https://cwiki.apache.org/confluence/display/KAFKA/KIP-687%3A+Automatic+Reloading+of+Security+Store) > > which seems like it was approved but never fully implemented. Can you > > please confirm if it is the case indeed? > > > > Regards, > > Gaurav > > > > > On 2 Dec 2024, at 23:12, Moncef Abboud <moncef.abbou...@gmail.com> > > wrote: > > > > > > Hi all, > > > > > > I hope your week is off to a great start. > > > > > > I created a KIP to add support for SSL hot reloading. > > > https://cwiki.apache.org/confluence/x/eIrREw > > > > > > Thank you for your feedback! > > > > > > > > > Moncef > > > >