Strimzi
-
|
Quick question: Can you create and use a listener for TLS Server Authentication (not mutual TLS) when using the Topic Operator? I have been playing around with Strimzi for a few days now, and one scenario I can't seem to get working is creating a listener (internal or external) with server only tls authentication, so setting |
Beta Was this translation helpful? Give feedback.
Replies: 1 comment 3 replies
-
|
The Topic Operator is using an internal internal listener which is not user configurable and is always using mTLS. It should not matter what do you configure in the listeners in the Kafka custom resource Just to clarify and make sure we are talking about the same thing -> when you use Strimzi to run the Kafka cluster, you deploy the Topic Operator directly from the |
Beta Was this translation helpful? Give feedback.
-
|
Yes, I deploy the Topic Operator directly from the |
Beta Was this translation helpful? Give feedback.
-
|
No, if you deployed it through the Kafka CR, you can use whatever you want for your clients and it will have no impact on the Topic Operator. When deployed through the Kafka CR, it is not using any of the listeners you configure there but a completely separate listener which you don't configure at all. |
Beta Was this translation helpful? Give feedback.
-
|
Got it, thanks for the clarification. |
Beta Was this translation helpful? Give feedback.
The Topic Operator is using an internal internal listener which is not user configurable and is always using mTLS. It should not matter what do you configure in the listeners in the Kafka custom resource
Just to clarify and make sure we are talking about the same thing -> when you use Strimzi to run the Kafka cluster, you deploy the Topic Operator directly from the
Kafkacustom resource such as in this example: https://github.com/strimzi/strimzi-kafka-operator/blob/main/examples/kafka/kafka-persistent.yaml#L38 ... you do not need to install it separately.