You are looking at the documentation of a prior release. To read the documentation of the latest release, please
visit here.
New to KubeDB? Please start here.
Reconfiguring TLS of ZooKeeper
This guide will give an overview on how KubeDB Ops-manager operator reconfigures TLS configuration i.e. add TLS, remove TLS, update Issuer/Cluster Issuer or Certificates and rotate the Certificates of ZooKeeper
.
Before You Begin
- You should be familiar with the following
KubeDB
concepts:
How Reconfiguring ZooKeeper TLS Configuration Process Works
The following diagram shows how KubeDB Ops-manager operator reconfigures TLS of a ZooKeeper
. Open the image in a new tab to see the enlarged version.
The Reconfiguring ZooKeeper TLS process consists of the following steps:
At first, a user creates a
ZooKeeper
Custom Resource Object (CRO).KubeDB
Provisioner operator watches theZooKeeper
CRO.When the operator finds a
ZooKeeper
CR, it creates required number ofPetSets
and related necessary stuff like secrets, services, etc.Then, in order to reconfigure the TLS configuration of the
ZooKeeper
database the user creates aZooKeeperOpsRequest
CR with desired information.KubeDB
Ops-manager operator watches theZooKeeperOpsRequest
CR.When it finds a
ZooKeeperOpsRequest
CR, it pauses theZooKeeper
object which is referred from theZooKeeperOpsRequest
. So, theKubeDB
Provisioner operator doesn’t perform any operations on theZooKeeper
object during the reconfiguring TLS process.Then the
KubeDB
Ops-manager operator will add, remove, update or rotate TLS configuration based on the Ops Request yaml.Then the
KubeDB
Ops-manager operator will restart all the Pods of the database so that they restart with the new TLS configuration defined in theZooKeeperOpsRequest
CR.After the successful reconfiguring of the
ZooKeeper
TLS, theKubeDB
Ops-manager operator resumes theZooKeeper
object so that theKubeDB
Provisioner operator resumes its usual operations.
In the next docs, we are going to show a step by step guide on reconfiguring TLS configuration of a ZooKeeper database using ZooKeeperOpsRequest
CRD.