-
Notifications
You must be signed in to change notification settings - Fork 1.1k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Support Kafka SASL MSK IAM authentication #3431
Comments
Fair ask! Are you willing to contribute this? |
I might be able to help but will take quite some time (Still refreshing my skills with go) 😂 If anyone else has the need for this feature asap. |
This issue has been automatically marked as stale because it has not had recent activity. It will be closed in 7 days if no further activity occurs. Thank you for your contributions. |
This issue has been automatically marked as stale because it has not had recent activity. It will be closed in 7 days if no further activity occurs. Thank you for your contributions. |
This issue has been automatically closed due to inactivity. |
Should this be closed? |
Understand that the experimental scaler is based on kafka-go and supports MSK IAM via the custom SASL mechanism, but just as an FYI, AWS released an alternative based on SASL-OAUTHBEARER which works with all Go-based Kafka libraries. Just wanted to highlight this in case it made any difference to the future of the non-experimental and experimental Kafka scalers. AWS announcement from Nov 2023 |
@dttung2905 @zroubalik . Wasn't the support to MSK IAM the only reason for the new scaler? I mean, could we unify both into the original one adding support to MSK IAM thanks to this? |
@JorTurFer sorry for the late reply. Its been a busy week for me. Iirc, supporting MSK IAM was a main reason, besides better support and documentation as outlined in #4692. What's our policy when it comes to deprecating scaler ? Do we follow N-2 cycle too? I took at look at the doc but its not clear too me on scaler deprecation https://github.com/kedacore/governance/blob/main/DEPRECATIONS.md |
The first step is to figure out if the experimental scaler brings extra features (not only now but also in the future) or its just for AWS |
Its a really good point to bring up during our next community meet up! We can discuss more indept there 💪 |
Proposal
MSK (Kafka Managed Services from AWS) supports IAM for authentication via SASL.
ref: segmentio/kafka-go#661
Use-Case
ServiceAccount should be able to be used for Kafka authentication.
Anything else?
No response
The text was updated successfully, but these errors were encountered: