falcosecurity/falcosidekick

Falcosidekick outout KAFKA with TLS support

Closed this issue · 4 comments

Motivation

Feature

Alternatives

Issif commented

Have you tested this config?

kafka:
  hostport: "ssl://<address>:9092"

Technically, it should work.

Issif commented

@victorrodriguez1984 can you try my proposal to check if it's ok please?

ibice commented

Hi @Issif, @victorrodriguez1984 and me have tested your proposal, but it seems it doesn't like it. It tries to resolve ssl://<address>:<port>. Here's the error message:

dial tcp: lookup ssl://server:9092: no such host

To see the error, I had to modify the code to handle this returned err:

// Errors are logged/captured via handleKafkaCompletion function, ignore here
_ = c.KafkaProducer.WriteMessages(context.Background(), kafkaMsg)

It might be worth handling it, it seems handleKafkaCompletion captures errors during async writes and WriteMessages returns synchronous errors. What do you think?

Issif commented

Everything is available with release 2.28.0 👍