I have deployed the Admin REST API in the brokers with mTLS activated, I can connect from curl, with client certificates, but when I create a CRD KafkaRestClass with mTLS specified:
apiVersion: platform.confluent.io/v1beta1
kind: KafkaRestClass
metadata:
name: default
namespace: confluentinc
spec:
kafkaClusterRef:
name: kafka
namespace: confluentinc
kafkaRest:
endpoint: https://kafka.confluentinc.svc.cluster.local:8090
authentication:
type: mtls
tls:
secretRef: kafka-tls
the operator shows the error “bad certificate”:
Warning {"object": {"kind":"KafkaRestClass","namespace":"confluentinc","name":"default","uid":"8dc4921b-e847d699c5e3","apiVersion":"platform.confluent.io/v1beta1","resourceVersion":"30896438"}, "reason": "Warning", "message": "https://kafka.confluentinc.svc.cluster.local:8090/kafka/v3 remote error: tls: bad certificate"}
this is the same error I get when not using certs. I don’t find any example of KafkaRestClass with mTLS. Is possible to use it? Do you have some example?
CFK v2.2.0 (operator)
CP v6.2.1 (server)