java.io.FileNotFoundException: /opt/kafka/cluster-ca-certs/ca.crt (Permission denied)

Issue

I am using the user which is the cluster admin to install AMQ streams， all the my-cluster-kafka* and zookeeper* failed. In my-cluster-kafka-2, there are below errors:

KAFKA_BROKER_ID=2
KAFKA_LOG_DIRS=/var/lib/kafka/kafka-log2
Preparing truststore for replication listener
Adding /opt/kafka/cluster-ca-certs/ca.crt to truststore /tmp/kafka/cluster.truststore.p12 with alias ca
keytool error: java.io.FileNotFoundException: /opt/kafka/cluster-ca-certs/ca.crt (Permission denied)
Preparing truststore for replication listener is complete
Preparing keystore for replication and clienttls listener
Error opening input file /opt/kafka/broker-certs/my-cluster-kafka-2.crt
/opt/kafka/broker-certs/my-cluster-kafka-2.crt: Permission denied
Preparing keystore for replication and clienttls listener is complete
Preparing truststore for clienttls listener
Adding /opt/kafka/client-ca-certs/ca.crt to truststore /tmp/kafka/clients.truststore.p12 with alias ca
keytool error: java.io.FileNotFoundException: /opt/kafka/client-ca-certs/ca.crt (Permission denied)