[KNOX-2288] Support Kafka Cruise Control for trusted proxy authentication

• Type: Improvement
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 1.3.0
• Component/s: cm-discovery
• Assignee: Unassigned
• Reporter: Viktor Somogyi-Vass
• Created: 11/Mar/20 17:13
• Updated: 11/Mar/20 17:14

Description

LinkedIn's Cruise Control is a project that aims to operate Kafka in an automatic hands free mode. It provides a REST API to allow users to interact with it. The REST API supports querying the workload and optimization proposals of the Kafka cluster, as well as triggering admin operations.
Controlling authentication and authorization is very important as Kafka administration operations should be restricted to the designated operator. Moreover it is desired to be used in various environments and authentication methods, therefore it would be an advantage to integrate with Knox where it would sit behind the Knox proxy which would perform the authentication for Cruise Control and would forward the user's ID.