Hello All,

We have a Strimzi kafka cluster on GKE with TLS implemented, the TLS certs
have a default expiry of 1 year i.e. the certs get renewed every year

Currently, on expiry - we have to provide the external Kafka clients with
new certs, the objective is to automate this process i.e. One should not
have to distribute the certs manually to the multiple clients, instead -
this should be automated

What is the best way to achieve this ? I was checking CMPv2 as an option -
however, the documentation is not very clear on this.

Any pointers on this is appreciated !

tia!


Stackoverflow link -

https://stackoverflow.com/questions/75024942/kafka-on-gke-automating-distribution-of-tls-certs-to-external-kafka-clients-on

Reply via email to