The current haproxykafka code already supports the ssl.key.location and ssl.cert.location and I've already tested it using the varnishkafka certificate/key for this.
What is needed now is:
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Resolved | Fabfur | T351117 Move analytics log from Varnish to HAProxy | |||
| Resolved | Fabfur | T370668 New software: haproxykafka | |||
| Open | Fabfur | T379776 Enable SSL client authentication on haproxykafka | |||
| Resolved | Fabfur | T380373 Allow TLS authenticated client to write on new topics |
Change #1090915 had a related patch set uploaded (by Fabfur; author: Fabfur):
[operations/puppet@production] haproxykafka: working on TLS client authentication to kafka
Change #1090915 merged by Fabfur:
[operations/puppet@production] haproxykafka: working on TLS client authentication to kafka
Change #1093317 had a related patch set uploaded (by Fabfur; author: Fabfur):
[operations/puppet@production] haproxykafka: fix permissions on ssl files
Change #1093317 merged by Fabfur:
[operations/puppet@production] haproxykafka: fix permissions on ssl files
Change #1093975 had a related patch set uploaded (by Fabfur; author: Fabfur):
[operations/puppet@production] haproxykafka: missing variable in merge
Change #1093990 had a related patch set uploaded (by Fabfur; author: Fabfur):
[operations/puppet@production] haproxykafka: enable ssl authentication