Skip to content

feature/rotate_certificates#9

Open
bigbluechief wants to merge 3 commits intofeature/upgrade_everythingfrom
feature/rotate_certificates
Open

feature/rotate_certificates#9
bigbluechief wants to merge 3 commits intofeature/upgrade_everythingfrom
feature/rotate_certificates

Conversation

@bigbluechief
Copy link
Copy Markdown

@bigbluechief bigbluechief commented Mar 24, 2026

Important

Is based on the branch feature/upgrade_everything. Requires that branch to be merged first, and then the base of this branch will be changed to main.
See #8

Implement expiry-aware Kafka client certificate handling in Kafkarator.

  • inspect keystore certificates and rotate when missing, unreadable, or within the configured rotation threshold
  • add configurable certificate rotation threshold in Aiven properties
  • annotate managed certificate secrets with certificate expiry and last rotation time
  • expose Prometheus metrics for certificate expiry, rotation pressure, inspections, rotations, and reconcile duration
  • enable actuator Prometheus endpoint and add Prometheus registry support
  • add PromQL documentation and an importable Grafana dashboard JSON
  • refresh README to document runtime stack, certificate behavior, configuration, and observability

Implement expiry-aware Kafka client certificate handling in Kafkarator.

- inspect keystore certificates and rotate when missing, unreadable, or
  within the configured rotation threshold
- add configurable certificate rotation threshold in Aiven properties
- annotate managed certificate secrets with certificate expiry and last
  rotation time
- expose Prometheus metrics for certificate expiry, rotation pressure,
  inspections, rotations, and reconcile duration
- enable actuator Prometheus endpoint and add Prometheus registry support
- add PromQL documentation and an importable Grafana dashboard JSON
- refresh README to document runtime stack, certificate behavior,
  configuration, and observability
@bigbluechief bigbluechief self-assigned this Mar 24, 2026
@bigbluechief bigbluechief changed the base branch from main to feature/upgrade_everything March 24, 2026 13:33
Copy link
Copy Markdown
Contributor

@sondre81 sondre81 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM 👍🏼

Husk å kjøre disse endringene i Alpha eller Beta miljøet først. Kafkarator er gammel og pleietrengende og dette er mye nytt som legges til.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants