Should be able to retrieve or generate certs from vault rather then using self signed certificates for Kafka client. Can we utilise PKI secrets engine from vault for cert management
Instead of using the self signed CA for broker pod key pair creation, cluster operator should have an option to request certificate from Vault PKI backend, so that i t can generate the key pair and get it signed by the CA configured in PKI backend. The authentication to vault can be performed by using kubernetes auth backend, Once the cert creation call is completed successfully, cluster operator should be able to pull the key pair using vault client libs and should mount it as an openshift secret to each broker pods.
This should be a completely automated process that happens as part of Kafka cluster provisioning.
Should be able to retrieve or generate certs from vault rather then using self signed certificates for Kafka client. Can we utilise PKI secrets engine from vault for cert management
Instead of using the self signed CA for broker pod key pair creation, cluster operator should have an option to request certificate from Vault PKI backend, so that i t can generate the key pair and get it signed by the CA configured in PKI backend. The authentication to vault can be performed by using kubernetes auth backend, Once the cert creation call is completed successfully, cluster operator should be able to pull the key pair using vault client libs and should mount it as an openshift secret to each broker pods.
This should be a completely automated process that happens as part of Kafka cluster provisioning.