Skip to content
This repository has been archived by the owner on Mar 29, 2023. It is now read-only.

[FEAT] Add support for Kafka Authentication #169

Closed
DanHatesNumbers opened this issue Jan 28, 2020 · 0 comments
Closed

[FEAT] Add support for Kafka Authentication #169

DanHatesNumbers opened this issue Jan 28, 2020 · 0 comments
Labels

Comments

@DanHatesNumbers
Copy link
Contributor

DanHatesNumbers commented Jan 28, 2020

Is your feature request related to a problem? Please describe.
As a Kiln Administrator
I want Kiln components to add support for Kafka authentication
So that I can control access to my Kafka cluster

Describe the solution you'd like
Kafka supports a number of authentication mechanisms: GSSAPI (Kerberos), Plain, OAuthBearer, SASL SCRAM, Delegation tokens and mutually authenticated TLS. Kiln components should add support for at least one of these mechanisms to allow Kafka clusters to disallow unauthenticated connections.

Additional context
Simplest approach that maintains reasonable security is probably SASL SCRAM. We're already requiring that Kiln connects over TLS, this provides a salted challenge-response mechanism (https://tools.ietf.org/html/rfc5802 for details) and doesn't have the added complexity of managing client certificates.

@DM-sb DM-sb added the wontfix This will not be worked on label Mar 29, 2023
@DM-sb DM-sb closed this as completed Mar 29, 2023
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
Projects
None yet
Development

No branches or pull requests

2 participants