Status of KIP-687 and best practices for X.509 certificates refreshing

[Jesus Cea]

Kafka 4.0 here.

I thought that KIP-687 <https://cwiki.apache.org/confluence/display/KAFKA/KIP-687%3A+Automatic+Reloading+of+Security+Store> was available but "ssl.keystore.location.refresh.interval.ms" seems to be silently ignored and not certificate reloading is done.

Is it actually available in Kafka 4.0?



Thanks.

--
Jesús Cea Avión                         _/_/      _/_/_/        _/_/_/
j...@jcea.es - https://www.jcea.es/    _/_/    _/_/  _/_/    _/_/  _/_/
Twitter: @jcea                        _/_/    _/_/          _/_/_/_/_/
jabber / xmpp:j...@jabber.org  _/_/  _/_/    _/_/          _/_/  _/_/
"Things are not so easy"      _/_/  _/_/    _/_/  _/_/    _/_/  _/_/
"My name is Dump, Core Dump"   _/_/_/        _/_/_/      _/_/  _/_/
"El amor es poner tu felicidad en la felicidad de otro" - Leibniz

KIP-687 is marked as "accepted" in 2020, but I haven't found any reference to it in the release notes of any Kafka release. If not, what is people doing to refresh certificates under Kraft, beside manualy updating the certificate files and rebooting the brokers/controllers?

OpenPGP_signature
Description: OpenPGP digital signature