Is your cluster reachable about terraform-provider-kafka

[Mongey]

Hey @MrMunki 👋, can you share the config you're using to attempt to connect?
Also, running TF_LOG=debug terraform plan might provide some more information into what's happening.

[MrMunki]

Hi,

Thanks for the response. I've just tried against an unencrypted kafka cluster and it does work, so it's the certs causing the issue by the looks of it. I've looked in the authorizer logs on the kafka server but it does not appear in there so it seems it's not even attempting to connect to the server.

My provider config is below, I've also attached the error bit of the log. The server name, of course, is changed

provider "kafka" {
bootstrap_servers = ["kafkabroker.domain.net:9093"]
ca_cert_file = "/folder/ca-cert"
client_cert_file = "/folder/kafka_cert"
client_key_file = "/folder/kafka.key"
skip_tls_verify = false
tls_enabled = true
}

TF_kafka_log.txt

[Mongey]

Can you try with skip_tls_verify = true ... I wonder if something there is broken 😅

[MrMunki]

I already tried that, and I've just tried it again, and no joy, still the same.

[MrMunki]

Hi, have you had a chance to look at this again?

[diodonfrost]

Same problem here

[kdefives]

Same issue here with
skip_tls_verify = true
tls_enabled = false

Seems ok when we add this arguments setted: sasl_username, sasl_password et sasl_mechanism

[rajivchirania]

Has anyone able to find solution for Error: kafka: client has run out of available brokers to talk to (Is your cluster reachable?) for AWS MSK

[Mongey]

Alright, I believer there was an issue with how the CA chain was being set. This should be resolved in the latest release.

[MrMunki]

Still getting the same error

Error: kafka: client has run out of available brokers to talk to (Is your cluster reachable?)

[mleuthold]

@MrMunki I had the same issue as you, but I used the wrong port in combination with the wrong config. These are the configs which work for me.

For port 9091 I use
skip_tls_verify = true
tls_enabled = false

For port 9092 I use
skip_tls_verify = true
tls_enabled = true

AFAIK 9092 is the SSL port of Kafka.

[MrMunki]

@mleuthold
Hi, the SSL port is 9093, I believe. 9092 is not even listening on my cluster as I have to have encryption.