Luke Chen
Luke Chen
@TaiJuWu @jsancio @kevin-wu24 , I found the current solution has one drawback, which is that the snapshot only contains `the latest voters at the time the snapshot taken`. That means...
> Thanks for the feature @TaiJuWu but I don't think we should change the semantic of the KRaft protocol without a KIP. > > I understand that the auto join...
@nandini12396 , adding new config (public API) needs to go through the KIP process: https://cwiki.apache.org/confluence/display/KAFKA/Kafka+Improvement+Proposals.
@nandini12396 , adding new metrics (public API) needs to go through the KIP process: https://cwiki.apache.org/confluence/display/KAFKA/Kafka+Improvement+Proposals.
@abhijeetk88 @kamalcph @satishd , I think the issue is valid. WDYT?
> Also, this is the wrong place to put this as these fields are user configurable. If we really want this, I think it should be handled in the operator....
Since we only observe the `testCertificates` failure in FIPS mode, I've updated the PR to only enable TLSv1.3 in ZK in `testCertificates`. @scholzj @im-konge , FYI.
> OpenSSL in FIPS mode supports TLSv1.3 only (by default? Can this be tuned? Or is 1.2 completely disabled in FIPS?) The new FIPS mode supports: `TLSv1.2 with Extended Master...
> Manipulating the exact list of cipher suites is really dangerous. We should definitely not do it by default anywhere. Without it it probably doesn't make sense to enable TLS...
@rmetzger , please help take a look when available since you reviewed this [PR](https://github.com/apache/flink/pull/14903) before. Thanks.