Unable to renew Custom CA Certificates in Event Streams cluster #154
Description
Issue Description
When updating the Custom Cluster CA certificates in an Event Streams cluster, using the following documented steps https://strimzi.io/docs/operators/latest/using.html#renewing-your-own-ca-certificates-str, none of the pods in the cluster roll to pick up the changes, and the zookeeper pods start to issue the following errors:
2021-04-16 15:07:59,715 WARN Exception caught (org.apache.zookeeper.server.NettyServerCnxnFactory) [nioEventLoopGroup-7-1]
io.netty.handler.codec.DecoderException: javax.net.ssl.SSLHandshakeException: Received fatal alert: certificate_unknown
at io.netty.handler.codec.ByteToMessageDecoder.callDecode(ByteToMessageDecoder.java:471)
at io.netty.handler.codec.ByteToMessageDecoder.channelRead(ByteToMessageDecoder.java:276)
at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:379)
Environment
- IBM Event Streams Version: 10.0 onwards deployed on Openshift