Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Bug]: Kafka in KRaft mode doesn't have security.inter.broker.protocol set to SSL #10903

Closed
deanmax opened this issue Dec 3, 2024 · 2 comments

Comments

@deanmax
Copy link

deanmax commented Dec 3, 2024

Bug Description

In the documentation, it stated that when using Kafka in KRaft mode, communication between brokers should be TLS enabled.
Screenshot 2024-12-03 at 21 40 38

However, my brokers still shows security.inter.broker.protocol: PLAINTEXT
Screenshot 2024-12-03 at 21 53 48
Screenshot 2024-12-03 at 21 54 28

And this value doesn't seem to be configurable
Screenshot 2024-12-03 at 21 55 57

Steps to reproduce

No response

Expected behavior

No response

Strimzi version

0.44.0

Kubernetes version

1.29

Installation method

No response

Infrastructure

No response

Configuration files and logs

No response

Additional context

No response

@scholzj
Copy link
Member

scholzj commented Dec 3, 2024

It has the listener.security.protocol.map set and configures it there. So as far as I know, that overrides whatever the default value is in security.inter.broker.protocol.

@deanmax
Copy link
Author

deanmax commented Dec 3, 2024

Thanks! I see SSL on port 9091 on my broker, indicating TLS for inter-broker comm

listener.security.protocol.map = CONTROLPLANE-9090:SSL,REPLICATION-9091:SSL,PLAIN-9092:PLAINTEXT,TLS-9093:SSL

Closing issue.

@deanmax deanmax closed this as completed Dec 3, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants