[KAFKA-15219] Support delegation tokens in KRaft

• Type: Improvement
• Status: Resolved
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 3.6.0
• Fix Version/s: 3.6.0
• Assignee: Proven Provenzano
• Reporter: Viktor Somogyi-Vass
• Created: 19/Jul/23 15:50
• Updated: 09/Feb/24 12:16
• Resolved: 19/Aug/23 18:16

Description

Delegation tokens have been created in KIP-48 and improved in KIP-373. KRaft enabled the way to supporting them in KIP-900 by adding SCRAM support but delegation tokens still don't support KRaft.

There are multiple issues:

• TokenManager still would try to create tokens in Zookeeper. Instead of this we should forward admin requests to the controller that would store them in the metadata similarly to SCRAM. We probably won't need new protocols just enveloping similarly to other existing controller requests.
• TokenManager should run on Controller nodes only (or in mixed mode).
• Integration tests will need to be adapted as well and parameterize them with Zookeeper/KRaft.
• Documentation needs to be improved to factor in KRaft.

Issue Links

• links to: GitHub Pull Request #14083
• mentioned in: Page Loading...