You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@flink.apache.org by "Michas Szacillo (Jira)" <ji...@apache.org> on 2025/03/12 06:29:00 UTC

[jira] [Created] (FLINK-37464) Update ZK to v3.9.3 in Flink Kubernetes Operator for TLS v1.3 support

Michas Szacillo created FLINK-37464:
---------------------------------------

             Summary: Update ZK to v3.9.3 in Flink Kubernetes Operator for TLS v1.3 support
                 Key: FLINK-37464
                 URL: https://issues.apache.org/jira/browse/FLINK-37464
             Project: Flink
          Issue Type: Improvement
          Components: Kubernetes Operator
    Affects Versions: 1.11.0
            Reporter: Michas Szacillo


Flink Kubernetes Operator currently runs with ZooKeeper (3.7.2 or 3.8.4) contributed via flink-shaded: [https://github.com/apache/flink-shaded/blob/master/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-38/pom.xml#L36] 

As of v3.9.2, ZooKeeper supports TLS v1.3 by default on JDK versions that support it: 
 * https://issues.apache.org/jira/browse/ZOOKEEPER-4415
 * [https://github.com/apache/zookeeper/pull/1919]

TLS v1.3 provides tangible benefits, faster handshakes, improved security (removing vulnerable cipher suites), and better overall performance (fewer round trips). 



--
This message was sent by Atlassian Jira
(v8.20.10#820010)