The parent task describes the current migration of Kafka brokers to the new Kafka PKI Intermediate CA. We need to update Kafka TLS client configs to use a truststore/bundle that accepts TLS certificates signed by the new Intermediate or by the Puppet CA.
List of Jumbo clients:
- FR kafkatee
- SRE kafkatee
- mirror maker
- varishkafka
- atskafka
- gobblin
- netflow
- eventgate analytics
Quickly verified on kafka-jumbo1001 with netstat -tuap | grep :9093 | awk '{print $4" "$5}' | sort | uniq but please let me know if I am missing any.