Uploaded image for project: 'Network Observability'
  1. Network Observability
  2. NETOBSERV-1066

mTLS with kafka-exporter is broken

    • Icon: Bug Bug
    • Resolution: Not a Bug
    • Icon: Undefined Undefined
    • None
    • None
    • Kafka, Operator
    • None
    • False
    • None
    • False
    • Important

      TLS with kafka exporter seems broken, when configuring as [1], errors in FLP logs are seen [2]

      $ oc get flowcollector cluster -o jsonpath={.spec.exporters} | jq
      [
        {
          "kafka": {
            "address": "kafka-cluster-kafka-bootstrap.netobserv-kafka",
            "tls": {
              "caCert": {
                "certFile": "ca.crt",
                "name": "kafka-cluster-cluster-ca-cert",
                "namespace": "netobserv-kafka",
                "type": "secret"
              },
              "enable": true,
              "insecureSkipVerify": false,
              "userCert": {
                "certFile": "user.crt",
                "certKey": "user.key",
                "name": "flp-kafka-export",
                "namespace": "netobserv-kafka-export",
                "type": "secret"
              }
            },
            "topic": "network-flows-export"
          },
          "type": "KAFKA"
        }
      ]
      

      [2]

      time=2023-05-26T19:00:57Z level=error msg=encodeKafka error: unexpected EOF: broker appears to be expecting TLS
      time=2023-05-26T19:00:57Z level=error msg=encodeKafka error: unexpected EOF: broker appears to be expecting TLS
      

      Also, we don't seem be watching/copying secrets for kafka exporter for NETOBSERV-773

              Unassigned Unassigned
              rhn-support-memodi Mehul Modi
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated:
                Resolved: