listener certificate renewal

[senthil13]

Hi Admin,

Our Kafka cluster runs with its own listener certificate, like below. This is working fine.

    listeners:
      - name: plain
        port: 9092
        tls: false
        type: internal
      - name: tls
        port: 9093
        tls: true
        type: internal
      - name: external
        port: 9094
        type: ingress
        tls: true
        configuration:
          brokerCertChainAndKey:
            secretName: listener-secret
            certificate: listener.crt
            key: listener.key
          bootstrap:
            host: strimzi-cluster-bootstrap.tcp.devops.com

Now we need to renew the certificate, but I am unable to find the procedure in the documents (may be I am looking wrong place). I see the renewal procedure/document for the own CA renewal procedure. Please help

Thanks
Senthil

[scholzj]

You simply update the certificate in the secret or you create a new secret with the renewed certificate and update the Kafka CR. The brokers will be rolled to pick up the new cert.

[senthil13]

thanks, let try that