Page MenuHomePhabricator

eventutilities-python should support using Kafka TLS ports
Closed, ResolvedPublic

Description

Currently, eventutilities-python only supports configuration of the Kafka servers to use via the KAFKA_BOOTSTRAP_SERVERS env var.

Before deploying in wikikube, we should be able to use the Kafka TLS 9093 port. To do this, we need to set a couple of other kafka client properties:

For librdkafka clients, these properties are:

security.protocol: ssl
ssl.ca.location: /etc/ssl/certs/wmf-ca-certificates.crt

We'll need to set the correpsonding configs for the Java Kafka client via the Flink connector. These will need to be passed through to the Kafka Source and Sink builders via setProperties.

  • eventutilities-python supports setting other Kafka client properties
  • mediawiki-event-enrichment supports setting other Kafka client properties via eventutilities-python
  • mediawiki-page-content-change-enrichment uses Kafka TLS ports in DSE

Parameterization improvements are also tracked in T328478: Refactor parameterization of eventutilities-python and mediawiki-event-enrichment

Event Timeline

Change 895754 had a related patch set uploaded (by Ottomata; author: Ottomata):

[operations/deployment-charts@master] mediawiki-page-content-change-enrichment - use kafka 9092 until we can use TLS

https://gerrit.wikimedia.org/r/895754

Change 895754 merged by Ottomata:

[operations/deployment-charts@master] mediawiki-page-content-change-enrichment - use kafka 9092 until we can use TLS

https://gerrit.wikimedia.org/r/895754

Change 919150 had a related patch set uploaded (by Gmodena; author: Gmodena):

[operations/deployment-charts@master] mediawiki-page-content-change-enrichment: use kafka TLS

https://gerrit.wikimedia.org/r/919150

Change 919150 merged by jenkins-bot:

[operations/deployment-charts@master] mediawiki-page-content-change-enrichment: use kafka TLS

https://gerrit.wikimedia.org/r/919150

Change 919887 had a related patch set uploaded (by Ottomata; author: Ottomata):

[operations/deployment-charts@master] dse-k8s-services/mediawiki-page-content-change-enrichment - use kafka SSL

https://gerrit.wikimedia.org/r/919887

Change 919887 merged by Ottomata:

[operations/deployment-charts@master] dse-k8s-services/mediawiki-page-content-change-enrichment - use kafka SSL

https://gerrit.wikimedia.org/r/919887