<a href="https://github.com/redpanda-data/deployment-automation/blob/main/ansible/play

This should be fixed by <a class="issue-link js-issue-link" data-error-text="Failed to

We also should update the rpk configuration properly: <div class="snippet-clipboar

Final "Configure via RPK" should look like: <div class="highlight highlight-source

tls/install-certs.yml playbook deletes rpc_server about deployment-automation HOT 4 CLOSED

redpanda-data commented on July 18, 2024

tls/install-certs.yml playbook deletes rpc_server

from deployment-automation.

Comments (4)

tmgstevens commented on July 18, 2024 1

This should be fixed by #96

from deployment-automation.

r-vasquez commented on July 18, 2024

We also should update the rpk configuration properly:

rpk redpanda config set 'rpk.kafka_api' "
            tls:
              truststore_file: /etc/redpanda/certs/truststore.pem
              cert_file: /etc/redpanda/certs/node.crt
              key_file: /etc/redpanda/certs/node.key
        " --format yaml

rpk redpanda config set 'rpk.admin_api' "
            tls:
              truststore_file: /etc/redpanda/certs/truststore.pem
              cert_file: /etc/redpanda/certs/node.crt
              key_file: /etc/redpanda/certs/node.key
        " --format yaml

from deployment-automation.

r-vasquez commented on July 18, 2024

Final "Configure via RPK" should look like:

  - name: Configure via RPK
    shell:
      cmd: |
        set -e

        rpk redpanda config set redpanda.kafka_api "
          - name: default
            address: {{ hostvars[inventory_hostname]['private_ip'] }}
            port: 9092
        " --format yaml

        rpk redpanda config set redpanda.advertised_kafka_api "
          - name: default
            address: {{ inventory_hostname }}
            port: 9092
        " --format yaml
        
        rpk redpanda config set redpanda.kafka_api_tls "
          - name: default
            enabled: true
            require_client_auth: false
            cert_file: /etc/redpanda/certs/node.crt
            key_file: /etc/redpanda/certs/node.key
            truststore_file: /etc/redpanda/certs/truststore.pem
        " --format yaml

        rpk redpanda config set redpanda.rpc_server_tls "
            enabled: true
            require_client_auth: false
            cert_file: /etc/redpanda/certs/node.crt
            key_file: /etc/redpanda/certs/node.key
            truststore_file: /etc/redpanda/certs/truststore.pem
        " --format yaml

        rpk redpanda config set 'rpk.kafka_api' "
            tls:
              truststore_file: /etc/redpanda/certs/truststore.pem
              cert_file: /etc/redpanda/certs/node.crt
              key_file: /etc/redpanda/certs/node.key
        " --format yaml
        
        chown -R redpanda:redpanda /etc/redpanda