...

Current state: Under Discussion

Discussion thread: here [Change the link from the KIP proposal email archive to your own email thread]

JIRA:

...

The changes will be limited to the SslFactory. Brokers, consumers, and producers, which rely on it, will benefit from the update.

Inspired by Spring Boot's SSL hot reload feature, the proposed changes would trigger an SslFactory reconfiguration whenever the configured keystore or truststore files are modified. Java's WatchService API can be used for file changes monitoring. Each SslFactory when configured with ssl.hot.reload=true will register its keystore and truststore files, along with its reconfiguration method, with the Watcher service. The service will then trigger reconfiguration whenever changes are detected in the registered files.

To prevent redundant reconfigurations, a quiet period is enforced across watched files, ensuring that related changes do not trigger unnecessary reconfigurations.

Compatibility, Deprecation, and Migration Plan

...