Details
-
Improvement
-
Status: Open
-
Major
-
Resolution: Unresolved
-
2.3.1
-
None
-
None
Description
We use SSL in both brokers and kafka clients for authenticate and authorization, and rotates the certificates every 12 hours. Kafka producers and consumer cannot pick up the rotated certs. This causes stream processing interruption (e.g. flink connector does not handle ssl exception, and the flink applicatoin has to be restarted when we hit this error). We need to improve kafka producer & client to support ssl certificate dynamic loading.