custom kafka ssl cert

[artesby]

does operator support specifying path to custom ssl certificate for kafka access? i am facing error

2024/10/17 13:32:23 checkKafka with backoff failed, retry 1, err: check consume offset from broker failed: error dialing all brokers, one of the errors: failed to dial: tls: failed to verify certificate: x509: certificate signed by unknown authority

tried this without success:

config:
    kafka:
      securityProtocol: SASL_SSL
      saslMechanisms: SCRAM-SHA-512
      tlsCaCert: <path-to-cert>

[haorenfsa]

@artesby not yet. I think operator needs a flag to skip tls check, for quick walk around

[navneetrajput06]

@haorenfsa This has been pending for a long time for us as well. We are unable to use SASL_SSL for external Kafka since we cannot send custom certificates in distributed mode.

Milvus Operator has a flag, useTLS=true, which needs to be removed. Please see my open issue below:
🔗 Milvus Operator Issue #118

If this can be addressed quickly, it would resolve our current issue. We won’t need to send the client-side certificate(mTLS).

[haorenfsa]

We'll provide a flag to skip dependency checks for milvus-operator. That will be a quick walk around