Change Details

This is a parent ticket for TLS and Auth[nz] for Kafka. I want to track planning for both of these in one ticket.

The 'analytics-eqiad' Kafka cluster hardware is due to be refreshed. We also want to enable Kafka security features. We also want to move this large beefy Kafka cluster out of the 'Analytics Cluster' / Analytics VLAN, and make it a fully productionized Kafka cluster, available for use of production services. We //may// eventually merge the existent smaller main-* Kafka clusters into these new ones, but we don't have plans to do that within the next year. This is the parent ticket for the provisioning, upgrade and migration plan for these new clusters.

This is a parent ticket for TLS and Auth[nz] for Kafkae 'analytics-eqiad' Kafka cluster hardware is due to be refreshed. We also want to enable Kafka security features. We also want to move this large beefy Kafka cluster out of the 'Analytics Cluster' / Analytics VLAN, and make it a fully productionized Kafka cluster, available for use of production services. We //may// eventually merge the existent smaller main-* Kafka clusters into these new ones, but we don't have plans to do that within the next year. I waThis is the parent to track planicket for the provisioning for both of, upgrade and migration plan for these in one ticketnew clusters.