Uploaded image for project: 'Kafka'
  1. Kafka
  2. KAFKA-8843

Zookeeper migration tool support for TLS

    XMLWordPrintableJSON

    Details

    • Type: New Feature
    • Status: Resolved
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 2.5.0
    • Component/s: None
    • Labels:
      None
    • Flags:
      Important

      Description

      Currently zookeeper-migration tool works based on SASL authentication. What means only digest and kerberos authentication is supported.

       

      With the introduction of ZK 3.5, TLS is added, including a new X509 authentication provider. 

       

      To support this great future and utilise the TLS principals, the zookeeper-migration-tool script should support the X509 authentication as well.

       

      In my newbie view, this should mean adding a new parameter to allow other ways of authentication around https://github.com/apache/kafka/blob/trunk/core/src/main/scala/kafka/admin/ZkSecurityMigrator.scala#L65. 

       

      If I understand the process correct, this will require a KIP, right?

       

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                rndgstn Ron Dagostino
                Reporter:
                purbon Pere Urbon-Bayes
                Reviewer:
                Manikumar
              • Votes:
                1 Vote for this issue
                Watchers:
                5 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: