Re: [VOTE] KIP-515: Hardened TLS Configs to ZooKeeper

2020-01-24 Thread Ron Dagostino
Hi everyone. This concludes the vote for KIP 515. The vote passes with +1 binding votes from Gwen, Rajini, and Manikumar and a +1 non-binding vote from Mitch. I have marked the KIP as "Accepted" and opened a pull request at https://github.com/apache/kafka/pull/8003. Ron Ron On Thu, Jan 23,

Re: [VOTE] KIP-515: Hardened TLS Configs to ZooKeeper

2020-01-23 Thread Ron Dagostino
Hi everyone. I discovered something minor while addressing the AclAuthorizer config inheritance issue that I need to document. The minimum 3 days for voting is up and we could successfully conclude the vote with 3 +1 binding votes and a +1 non-binding vote, but I'll leave the vote open another da

Re: [VOTE] KIP-515: Hardened TLS Configs to ZooKeeper

2020-01-22 Thread Ron Dagostino
Hi everyone. While finishing the PR for this KIP I realized that the inheritance of TLS ZooKeeper configs that happens in the *authorizer* does not reflect he spirit of our discussion. In particular, based on our inheritance discussion in the DISCUSS thread, the inheritance of authorizer configs

Re: [VOTE] KIP-515: Hardened TLS Configs to ZooKeeper

2020-01-20 Thread Manikumar
+1 (binding). Thanks for the KIP. On Mon, Jan 20, 2020 at 9:21 PM Rajini Sivaram wrote: > +1 (binding) > > Thanks for the KIP, Ron! > > Regards, > > Rajini > > > On Mon, Jan 20, 2020 at 3:36 PM Gwen Shapira wrote: > > > +1 (binding), this has been an on-going concern. Thank you for > > address

Re: [VOTE] KIP-515: Hardened TLS Configs to ZooKeeper

2020-01-20 Thread Rajini Sivaram
+1 (binding) Thanks for the KIP, Ron! Regards, Rajini On Mon, Jan 20, 2020 at 3:36 PM Gwen Shapira wrote: > +1 (binding), this has been an on-going concern. Thank you for > addressing this, Ron. > > On Mon, Jan 20, 2020 at 5:22 AM Ron Dagostino wrote: > > > > Hi everyone. I would like to s

Re: [VOTE] KIP-515: Hardened TLS Configs to ZooKeeper

2020-01-20 Thread Gwen Shapira
+1 (binding), this has been an on-going concern. Thank you for addressing this, Ron. On Mon, Jan 20, 2020 at 5:22 AM Ron Dagostino wrote: > > Hi everyone. I would like to start a vote on KIP-515: Enable ZK > client to use the new TLS supported authentication. > > The KIP is here: > https://cwiki

Re: [VOTE] KIP-515: Hardened TLS Configs to ZooKeeper

2020-01-20 Thread Mitchell
+1 (non-binding). Super +1 on this. -mitch On Mon, Jan 20, 2020 at 7:22 AM Ron Dagostino wrote: > > Hi everyone. I would like to start a vote on KIP-515: Enable ZK > client to use the new TLS supported authentication. > > The KIP is here: > https://cwiki.apache.org/confluence/display/KAFKA/KIP-

[VOTE] KIP-515: Hardened TLS Configs to ZooKeeper

2020-01-20 Thread Ron Dagostino
Hi everyone. I would like to start a vote on KIP-515: Enable ZK client to use the new TLS supported authentication. The KIP is here: https://cwiki.apache.org/confluence/display/KAFKA/KIP-515%3A+Enable+ZK+client+to+use+the+new+TLS+supported+authentication The discussion thread is here: https://li