You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@pulsar.apache.org by GitBox <gi...@apache.org> on 2023/03/23 09:03:24 UTC
[GitHub] [pulsar] snailxr created a discussion: Can I config the pulsar TLS Encryption at tenant level?
GitHub user snailxr created a discussion: Can I config the pulsar TLS Encryption at tenant level?
Is it possible to config the pulsar TLS Encryption at the tenant level?
For example, I only want one specific tenant enables the TLS, and the other tenant to disable the TLS
I can only get how to set TLS encryption for the pulsar at https://pulsar.apache.org/docs/2.11.x/security-tls-transport/.
GitHub link: https://github.com/apache/pulsar/discussions/19907
----
This is an automatically sent email for commits@pulsar.apache.org.
To unsubscribe, please send an email to: commits-unsubscribe@pulsar.apache.org
[GitHub] [pulsar] jak78 added a comment to the discussion: Can I config the pulsar TLS Encryption at tenant level?
Posted by GitBox <gi...@apache.org>.
GitHub user jak78 added a comment to the discussion: Can I config the pulsar TLS Encryption at tenant level?
@snailxr welcome to the community! As @yuweisung this is doable but cumbersome. @snailxr could you tell us why you want to disable TLS at the tenant level?
GitHub link: https://github.com/apache/pulsar/discussions/19907#discussioncomment-5406569
----
This is an automatically sent email for commits@pulsar.apache.org.
To unsubscribe, please send an email to: commits-unsubscribe@pulsar.apache.org
[GitHub] [pulsar] yuweisung added a comment to the discussion: Can I config the pulsar TLS Encryption at tenant level?
Posted by GitBox <gi...@apache.org>.
GitHub user yuweisung added a comment to the discussion: Can I config the pulsar TLS Encryption at tenant level?
It is possible to do so but an operational headache.
You can turn on/off tls encryption (pulsar+ssl, or pulsar) and set the advertisedlistener in individual brokers. Then use tenant/namespace isolation to force subset of brokers to serve tenants.
Technically, it is doable. But it is error-prone.
GitHub link: https://github.com/apache/pulsar/discussions/19907#discussioncomment-5406450
----
This is an automatically sent email for commits@pulsar.apache.org.
To unsubscribe, please send an email to: commits-unsubscribe@pulsar.apache.org
[GitHub] [pulsar] jak78 edited a comment on the discussion: Can I config the pulsar TLS Encryption at tenant level?
Posted by GitBox <gi...@apache.org>.
GitHub user jak78 edited a comment on the discussion: Can I config the pulsar TLS Encryption at tenant level?
@snailxr welcome to the community! As @yuweisung wrote: this is doable but cumbersome. @snailxr could you tell us why you want to disable TLS at the tenant level?
GitHub link: https://github.com/apache/pulsar/discussions/19907#discussioncomment-5406569
----
This is an automatically sent email for commits@pulsar.apache.org.
To unsubscribe, please send an email to: commits-unsubscribe@pulsar.apache.org
[GitHub] [pulsar] snailxr added a comment to the discussion: Can I config the pulsar TLS Encryption at tenant level?
Posted by GitBox <gi...@apache.org>.
GitHub user snailxr added a comment to the discussion: Can I config the pulsar TLS Encryption at tenant level?
Thanks for your reply @yuweisung .
@jak78 Our product serves different customers who use the same Pulsar cluster, but each customer has different security requirements.
GitHub link: https://github.com/apache/pulsar/discussions/19907#discussioncomment-5412687
----
This is an automatically sent email for commits@pulsar.apache.org.
To unsubscribe, please send an email to: commits-unsubscribe@pulsar.apache.org
[GitHub] [pulsar] snailxr added a comment to the discussion: Can I config the pulsar TLS Encryption at tenant level?
Posted by GitBox <gi...@apache.org>.
GitHub user snailxr added a comment to the discussion: Can I config the pulsar TLS Encryption at tenant level?
@yuweisung Could you give me some steps or some links that I can refer to?
GitHub link: https://github.com/apache/pulsar/discussions/19907#discussioncomment-5412697
----
This is an automatically sent email for commits@pulsar.apache.org.
To unsubscribe, please send an email to: commits-unsubscribe@pulsar.apache.org