From b94ab07c2fbc35ae305c740bbfc49382346cb52b Mon Sep 17 00:00:00 2001
From: Praveen raj Mani <praveen@minio.io>
Date: Wed, 21 Jun 2023 23:20:40 +0530
Subject: [PATCH] Honor global root CAs for kafka audit tls (#17481)

honor global root CAs for kafka audit tls
---
 cmd/config-current.go | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/cmd/config-current.go b/cmd/config-current.go
index 33bd9402c..83ca6d5c4 100644
--- a/cmd/config-current.go
+++ b/cmd/config-current.go
@@ -616,6 +616,9 @@ func applyDynamicConfigForSubSys(ctx context.Context, objAPI ObjectLayer, s conf
 		}
 		for n, l := range loggerCfg.AuditKafka {
 			if l.Enabled {
+				if l.TLS.Enable {
+					l.TLS.RootCAs = globalRootCAs
+				}
 				l.LogOnce = logger.LogOnceIf
 				loggerCfg.AuditKafka[n] = l
 			}