tooz/releasenotes/notes/zookeeper_tls-808355fd2ab1acae.yaml
Dmitriy Rabotyagov f11666b66c Allow to pass ssl-related args for zookeeper
Zookeeper does support TLS encryption and authentication for client
connections. There's no reason not to pass these arguments to the kazoo
to allow encrypted connections.

We bump minimum kazoo version to 2.6.0 since change implementin SSL support
has been merged with [1] and was first released with 2.6.0 tag.

[1] 35ce10669a

Change-Id: Ied29512989f477a19753afcb789e5588877fd688
2022-12-08 19:54:11 +00:00

18 lines
658 B
YAML

---
features:
- |
Added TLS support for Zookeeper.
TLS-related options can be defined in a connection URL as query parameters
and they will be passed to the Kazoo driver as client arguments.
* ``ca``: SSL CA file to use for authentication
* ``certfile``: SSL certfile to use for authentication
* ``keyfile``: SSL keyfile to use for authentication
* ``keyfile_password``: keyfile password
* ``use_ssl``: controls whether SSL is used or not. Default to False.
* ``verify_certs``: when use_ssl is True you can control whether to
complete certificate validation
This also bumps minimum kazoo version to >=2.6.0