Add documentation for Kafka keystores

[nasark]

• added documentation outlining steps to create keystores for Kafka and how to integrate them with internal-certificates-secret in order to use SSL with Kafka

Depends on:

• Script to generate Kafka keystores for SSL manageiq-pods#955

Needed for:

• Kafka SSL with KRaft manageiq-pods#951

Ref:

• [RFE] Allow SSL/TLS communication between optional pods manageiq-pods#789

@miq-bot assign @bdunne
@miq-bot add_reviewer @Fryguy
@miq-bot add_label enhancement

[agrare]

@bdunne how is this done for other services like postgres/memcached? I don't think there are extra manual steps for those?

[nasark]

@agrare they use the cert-generator script https://github.com/ManageIQ/manageiq-pods/blob/master/tools/cert_generator.rb. Kafka uses keystores for SSL which require the use of keytool and so I provided manual steps. We could add a script that does this instead perhaps?

Kafka does support PEM format but the keys generated by the cert-generator script are in PKSC#1 whereas Kafka uses PKSC#8 and I was not able to make the conversion

[nasark]

• removed manual steps docs and added info regarding keystore generating script added in Script to generate Kafka keystores for SSL manageiq-pods#955

[miq-bot]

Checked commit nasark@38ddb52 with ruby 2.6.10, rubocop 1.28.2, haml-lint 0.35.0, and yamllint
0 files checked, 0 offenses detected
Everything looks fine. 👍

[miq-bot]

This pull request has been automatically marked as stale because it has not been updated for at least 3 months.

If these changes are still valid, please remove the stale label, make any changes requested by reviewers (if any), and ensure that this issue is being looked at by the assigned/reviewer(s)

Thank you for all your contributions! More information about the ManageIQ triage process can be found in the triage process documentation.

[nasark]

@miq-bot remove_label stale

[miq-bot]

This pull request has been automatically marked as stale because it has not been updated for at least 3 months.

If these changes are still valid, please remove the stale label, make any changes requested by reviewers (if any), and ensure that this issue is being looked at by the assigned/reviewer(s)

Thank you for all your contributions! More information about the ManageIQ triage process can be found in the triage process documentation.

[nasark]

This is no longer applicable as we have moved to using strimzi