Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

🔒 Enable SSL listeners for Kafka Brokers #70

Merged
merged 6 commits into from
Jul 28, 2023

Conversation

rmarting
Copy link
Collaborator

@rmarting rmarting commented Jul 27, 2023

This PR includes the following use case to resolve #63

[:heavy_check_mark:] Enable SSL listener
[:heavy_check_mark:] Use of server keystore, truststore to expose SSL endpoint
[:heavy_check_mark:] No authentication required
[:heavy_check_mark:] Use of client truststore to connect to the Kafka SSL endpoint
[:heavy_check_mark:] Enable SASL (PLAIN mechanism) authentication under the SSL listener
[:heavy_check_mark:] Enable SASL (SCRAM mechanism) authentication under the SSL listener
[:red_circle:] Enable TLS authentication under the SSL listener

The amq_streams_ssl_no_auth.yml playbook tests and verifies the no authentication use case.
The amq_streams_ssl_auth_sasl.yml playbook tests and verifies the authentication use cases.

The playbooks require the use of a set of keystore and truststore files, all of them created for testing purposes in the folder cerst.

This PR is in Work-in-Progess and it is not ready for review or merge. It is pending of the following actions:

  • Review of the molecule tests to use the certificates created. It might require to move to a different place
  • Create the molecule test for the new playbooks and verify the execution successfully.

@rmarting
Copy link
Collaborator Author

rmarting commented Jul 27, 2023

@rpelisse Could you review the molecule tests to add the new ones created, and the right location for the keystore and truststore files for the molecule tests.

Please, add your commits into this branch as I will need to add more commits to complete the rest of use cases of the issue. Thanks!

@rpelisse rpelisse added the major_changes Major changes mean the user can CHOOSE to make a change when they update but do not have to label Jul 28, 2023
@rpelisse rpelisse changed the title (WIP) 🔒 Enable SSL listeners for Kafka Brokers 🔒 Enable SSL listeners for Kafka Brokers Jul 28, 2023
@rpelisse rpelisse merged commit 41cd1f0 into ansible-middleware:main Jul 28, 2023
1 check passed
@rmarting rmarting deleted the issue_63_tls_encryption branch July 28, 2023 19:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
major_changes Major changes mean the user can CHOOSE to make a change when they update but do not have to
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Support for TLS encryption for Kafka Brokers
3 participants