Christo Lolov created KAFKA-20931:
-------------------------------------
Summary: Kraft network client doesn't handle certificate rotation
Key: KAFKA-20931
URL: https://issues.apache.org/jira/browse/KAFKA-20931
Project: Kafka
Issue Type: Bug
Components: core
Reporter: Christo Lolov
Kafka supports "online" certificate rotations via dynamic configurations for
key and trust stores. In cases such as NodeToControllerChannelManager the
channel builder registers itself as a reconfigurable so that it gets updates.
However, KafkaRaftManager's channel builder does not do this as part of
creating the network client. In the event of a certificate expiry this leads to
the need to restart the Kafka process so that the new certificates are picked
up.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
