<p>I have deployed Cassandra reaper as a stateful set in kubernetes cluster using latest docker image of it, to maintain Cassandra cluster. I have used Cassandra as a backend storage to store reaper data; which is working fine.</p>
<p>Just wanted to know how we can integrate ssl enabled Cassandra cluster to store reaper data. I have seen a template file <code>cassandra-reaper-cassandra-ssl.yaml</code>, which shows that need to add <code>ssl:type:jdk</code>, which I didn't get properly. Do I have to specify my ssl certificate location also in this section.</p>
<p>Also have seen after the deployment, and logging to pod showing me one env variable <code>REAPER_CASS_NATIVE_PROTOCOL_SSL_ENCRYPTION_ENABLED</code> which is having default value as <code>false</code>, <strong>do I need to use this entry and make it as <code>true</code>?</strong></p>

andy
<p>You do have to set <code>REAPER_CASS_NATIVE_PROTOCOL_SSL_ENCRYPTION_ENABLED</code> to true, which <a href="https://github.com/thelastpickle/cassandra-reaper/blob/2.0.5/src/server/src/main/docker/configure-persistence.sh#L48-L53" rel="nofollow noreferrer">will set the ssl:type:jdk for you</a> in the container.
Then, you need to <a href="https://github.com/thelastpickle/cassandra-reaper/blob/2.0.5/src/server/src/main/docker/Dockerfile#L72" rel="nofollow noreferrer">set the <code>JAVA_OPTS</code> env variable</a> on the container which will allow you to set the truststore and keystore location and passwords:</p>
<pre><code>-Djavax.net.ssl.keyStore=/path/to/keystore.jks
-Djavax.net.ssl.keyStorePassword=keystore_password
-Djavax.net.ssl.trustStore=/path/to/truststore.jks
-Djavax.net.ssl.trustStorePassword=truststore_password
</code></pre>
<p>With this, you should be able to use a cluster that uses client encryption to store Reaper data.</p>
