Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Remove any stunnel reference and usage #455

Open
ppatierno opened this issue Mar 18, 2024 · 3 comments
Open

Remove any stunnel reference and usage #455

ppatierno opened this issue Mar 18, 2024 · 3 comments

Comments

@ppatierno
Copy link
Collaborator

Because of this PR strimzi/strimzi-kafka-operator#9840 on the upstream Strimzi project, we are removing the support for the Bidirectional Topic Operator so the corresponding TLS sidecar as well.
It means that stunnel is not needed anymore.
We should remove any reference and usage to stunnel within the Kafka images build for AMQ Streams.

@fvaleri
Copy link

fvaleri commented Mar 18, 2024

This is done as part of #9840. Do you see some leftover?

@ppatierno
Copy link
Collaborator Author

Nope but there is a work to do in our cekit related files here. It's not related with upstream.

@k-wall
Copy link
Collaborator

k-wall commented Sep 16, 2024

Looking at the 2.8 branch, we've still got references to stunnel, including the installation on a additional RPM. This will give us a great potential for CVEs. All of these references are to be removed, right?

Should we raise a JIRA to make sure we get this done for 2.8?

grep -ir stunnel .
./kafka/kafka-3.7.0/image.yaml:    - stunnel
./kafka/kafka-3.6.0/image.yaml:    - stunnel
./kafka/modules/kafka/base/install.sh:mkdir $STUNNEL_HOME
./kafka/modules/kafka/base/install.sh:cp -r ${SCRIPTS_DIR}/stunnel/* ${STUNNEL_HOME}/
./kafka/modules/kafka/base/install.sh:chmod -R 755 ${STUNNEL_HOME}
./kafka/modules/kafka/base/module.yaml:  - name: "STUNNEL_HOME"
./kafka/modules/kafka/base/module.yaml:    value: "/opt/stunnel"

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Development

No branches or pull requests

3 participants