Description
We need to make it possible to secure the Zookeeper cluster Kafka is using. This would make use of the normal authentication ZooKeeper provides. ZooKeeper supports a variety of authentication mechanisms so we will need to figure out what has to be passed in to the zookeeper client.
The intention is that when the current round of client work is done it should be possible to run without clients needing access to Zookeeper so all we need here is to make it so that only the Kafka cluster is able to read and write to the Kafka znodes (we shouldn't need to set any kind of acl on a per-znode basis).
Attachments
Issue Links
- is blocked by
-
KAFKA-2169 Upgrade to zkclient-0.5
-
- Resolved
-
- is depended upon by
-
KAFKA-1696 Kafka should be able to generate Hadoop delegation tokens
-
- Open
-
- is part of
-
KAFKA-2639 Refactoring of ZkUtils
-
- Resolved
-