[KAFKA-8843] Zookeeper migration tool support for TLS

• Type: New Feature
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 2.5.0
• Flags: Important
• Assignee: Ron Dagostino
• Reporter: Pere Urbon-Bayes
• Reviewer: Manikumar
• Created: 28/Aug/19 16:26
• Updated: 10/Feb/20 02:24
• Resolved: 08/Feb/20 15:52

Description

Currently zookeeper-migration tool works based on SASL authentication. What means only digest and kerberos authentication is supported.

 

With the introduction of ZK 3.5, TLS is added, including a new X509 authentication provider. 

 

To support this great future and utilise the TLS principals, the zookeeper-migration-tool script should support the X509 authentication as well.

 

In my newbie view, this should mean adding a new parameter to allow other ways of authentication around https://github.com/apache/kafka/blob/trunk/core/src/main/scala/kafka/admin/ZkSecurityMigrator.scala#L65. 

 

If I understand the process correct, this will require a KIP, right?

 

Issue Links

• is duplicated by: KAFKA-9284 Add documentation and system tests for TLS-encrypted Zookeeper connections
• links to: GitHub Pull Request #8003
• mentioned in: Page Loading...