[
https://issues.apache.org/jira/browse/FLINK-37464?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Michas Szacillo updated FLINK-37464:
------------------------------------
Description:
Flink Kubernetes Operator currently runs with ZooKeeper (3.7.2 or 3.8.4)
contributed via flink-shaded:
[https://github.com/apache/flink-shaded/blob/master/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-38/pom.xml#L36]
As of v3.9.2, ZooKeeper supports TLS v1.3 by default on JDK versions that
support it:
* https://issues.apache.org/jira/browse/ZOOKEEPER-4415
* [https://github.com/apache/zookeeper/pull/1919]
TLS v1.3 provides tangible benefits: faster handshakes, improved security
(removing vulnerable cipher suites), and better overall performance (fewer
round trips).
was:
Flink Kubernetes Operator currently runs with ZooKeeper (3.7.2 or 3.8.4)
contributed via flink-shaded:
[https://github.com/apache/flink-shaded/blob/master/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-38/pom.xml#L36]
As of v3.9.2, ZooKeeper supports TLS v1.3 by default on JDK versions that
support it:
* https://issues.apache.org/jira/browse/ZOOKEEPER-4415
* [https://github.com/apache/zookeeper/pull/1919]
TLS v1.3 provides tangible benefits, faster handshakes, improved security
(removing vulnerable cipher suites), and better overall performance (fewer
round trips).
> Update ZK to v3.9.3 in Flink Kubernetes Operator for TLS v1.3 support
> ---------------------------------------------------------------------
>
> Key: FLINK-37464
> URL: https://issues.apache.org/jira/browse/FLINK-37464
> Project: Flink
> Issue Type: Improvement
> Components: Kubernetes Operator
> Affects Versions: 1.11.0
> Reporter: Michas Szacillo
> Priority: Major
>
> Flink Kubernetes Operator currently runs with ZooKeeper (3.7.2 or 3.8.4)
> contributed via flink-shaded:
> [https://github.com/apache/flink-shaded/blob/master/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-38/pom.xml#L36]
>
> As of v3.9.2, ZooKeeper supports TLS v1.3 by default on JDK versions that
> support it:
> * https://issues.apache.org/jira/browse/ZOOKEEPER-4415
> * [https://github.com/apache/zookeeper/pull/1919]
> TLS v1.3 provides tangible benefits: faster handshakes, improved security
> (removing vulnerable cipher suites), and better overall performance (fewer
> round trips).
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
