Uploaded image for project: 'Kafka'
  1. Kafka
  2. KAFKA-15219

Support delegation tokens in KRaft

Agile BoardAttach filesAttach ScreenshotVotersWatch issueWatchersCreate sub-taskLinkCloneUpdate Comment AuthorReplace String in CommentUpdate Comment VisibilityDelete Comments
    XMLWordPrintableJSON

Details

    • Improvement
    • Status: Resolved
    • Critical
    • Resolution: Fixed
    • 3.6.0
    • 3.6.0
    • None
    • None

    Description

      Delegation tokens have been created in KIP-48 and improved in KIP-373. KRaft enabled the way to supporting them in KIP-900 by adding SCRAM support but delegation tokens still don't support KRaft.

      There are multiple issues:

      • TokenManager still would try to create tokens in Zookeeper. Instead of this we should forward admin requests to the controller that would store them in the metadata similarly to SCRAM. We probably won't need new protocols just enveloping similarly to other existing controller requests.
      • TokenManager should run on Controller nodes only (or in mixed mode).
      • Integration tests will need to be adapted as well and parameterize them with Zookeeper/KRaft.
      • Documentation needs to be improved to factor in KRaft.

      Attachments

        Activity

          This comment will be Viewable by All Users Viewable by All Users
          Cancel

          People

            pprovenzano Proven Provenzano
            viktorsomogyi Viktor Somogyi-Vass
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Slack

                Issue deployment