Skip to content

Secure zookeeper configuration

Adem Efe Gencer edited this page Jun 21, 2019 · 3 revisions

Cruise Control uses zookeeper clients for its operation. If the zookeeper is secured, the following steps are to be taken care of so that the zookeeper client authenticates successfully.

  • Set the config zookeeper.security.enabled in "$base_dir/config/cruisecontrol.properties" to true.
  • Rename the file "$base_dir/config/cruise_control_jaas.conf_template" to "$base_dir/config/cruise_control_jaas.conf".
  • In the file cruise_control_jaas.conf, enter the appropriate Client{ .. } entry for the zookeeper client.

Cruise Control will export the "$base_dir/config/cruise_control_jaas.conf" configuration file only if it is present. Please ensure that the jaas file contains the correct entry for successful authentication. The authentication failure/success messages will appear in the Cruise Control logs on startup.

NOTE: If using the SASL protocol, you could enter the KafkaClient{ .. } entry here as this configuration file will be exported.