TLS with kafka exporter seems broken, when configuring as [1], errors in FLP logs are seen [2]
$ oc get flowcollector cluster -o jsonpath={.spec.exporters} | jq
[
{
"kafka": {
"address": "kafka-cluster-kafka-bootstrap.netobserv-kafka",
"tls": {
"caCert": {
"certFile": "ca.crt",
"name": "kafka-cluster-cluster-ca-cert",
"namespace": "netobserv-kafka",
"type": "secret"
},
"enable": true,
"insecureSkipVerify": false,
"userCert": {
"certFile": "user.crt",
"certKey": "user.key",
"name": "flp-kafka-export",
"namespace": "netobserv-kafka-export",
"type": "secret"
}
},
"topic": "network-flows-export"
},
"type": "KAFKA"
}
]
[2]
time=2023-05-26T19:00:57Z level=error msg=encodeKafka error: unexpected EOF: broker appears to be expecting TLS time=2023-05-26T19:00:57Z level=error msg=encodeKafka error: unexpected EOF: broker appears to be expecting TLS
Also, we don't seem be watching/copying secrets for kafka exporter for NETOBSERV-773