Cluster API

About the Cluster API

Cluster API is used to administer and monitor the Axual cluster. It is used to perform tasks like:

  • Get consumer group offsets per topic

  • List consumer groups per cluster

  • Inspect topic configuration

  • Copy offsets from consumer group A to B for topic C

TLS Protocols and Cipher Suites

Want to enable other TLS protocol versions and cipher suites?

From 2021.3, Cluster API only accept TLSv1.2 connections by default.
TLSv1.0 and TLSv1.1 are deprecated due to known security vulnerabilities.

If you still want to enable old TLS protocol versions, you can add it by setting a configuration as mentioned below:

Using Axual CLI

Add or modify the following configuration in the Cluster API config file for the cluster.

platform-config/clusters/{cluster-name}/cluster-api.sh
# Enabling old TLS protocol versions along with version TLSv1.2
CLUSTERAPI_SERVER_SSL_PROTOCOLS="TLSv1.2,TLSv1.1,TLSv1"

# By default all JAVA 11 cipher suites are supported
CLUSTERAPI_SERVER_SSL_CIPHERS="TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,..."

Using Axual Helm Charts

Edit the values.yaml for your instance and add the following configuration

platform:
    core:
      clusterapi:
        security:
          protocols: TLSv1.2,TLSv1.1,TLSv1
          # By default all JAVA 11 cipher suites are supported
          ciphers: TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,...