[
https://issues.apache.org/jira/browse/KAFKA-20931?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Christo Lolov resolved KAFKA-20931.
-----------------------------------
Resolution: Duplicate
> Kraft network client doesn't handle certificate rotation
> --------------------------------------------------------
>
> Key: KAFKA-20931
> URL: https://issues.apache.org/jira/browse/KAFKA-20931
> Project: Kafka
> Issue Type: Bug
> Components: core
> Reporter: Christo Lolov
> Priority: Major
>
> Kafka supports "online" certificate rotations via dynamic configurations for
> key and trust stores. In cases such as NodeToControllerChannelManager the
> channel builder registers itself as a reconfigurable so that it gets updates.
> However, KafkaRaftManager's channel builder does not do this as part of
> creating the network client. In the event of a certificate expiry this leads
> to the need to restart the Kafka process so that the new certificates are
> picked up.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
