[MINIFICPP-1677] Add SASL PLAIN mechanism support to Kafka processors

• Type: New Feature
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 0.11.0
• Assignee: Gábor Gyimesi
• Reporter: Gábor Gyimesi
• Created: 29/Oct/21 13:10
• Updated: 01/Dec/21 13:29
• Resolved: 01/Dec/21 13:29

Description

PublishKafka processor currently supports Kerberos properties for SASL/GSSAPI configuration which is the default SASL configuration in librdkafka. We should also support SASL/PLAIN configuration with username and password authentication. This requires adding these additional username, password, sasl mechanism properties.

We may also need to extend the security protocol options with SASL_PLAINTEXT and SASL_SSL to be more precise which protocol is used, as previously SASL was implicitly implied when Kerberos properties were set. This would also be on par with the NiFi implementation. Another option would be to prefer setting the security protocol depending on the Kerberos or plain username password properties and the configured plaintext/ssl option. The latter option would provide backward compatibility.

The same configuration possibilities should also be implemented in ConsumeKafka processor.