[SENTRY-912] Sentry integration with Apache Kafka

• Type: New Feature
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.8.0
• Component/s: kafka-integration
• Assignee: Ashish Singh
• Reporter: Dapeng Sun
• Created: 14/Oct/15 06:47
• Updated: 17/Aug/16 20:48
• Resolved: 17/Aug/16 20:48

Description

Apache Kafka supports pluggable authorization by configuring a Kafka Authorizer now(https://issues.apache.org/jira/browse/KAFKA-2210), This jira will design and implementation a Sentry Kafka Authorizer, so that Kafka could benefit from Sentry policy engine.

Issue Links

• is blocked by: SENTRY-1103 Authorizable names' case sensitivity must be decided by plugins
• is related to: SENTRY-1253 SentryShellKafka is incorrectly setting component as "KAFKA"
• links to: Design Document Link for Discuss
• links to: RB

Sub-Tasks

• Create an initial branch for CI: Resolved
• Add core model for Kafka: Resolved
• Add policy engine for Kafka: Resolved
• Add Kafka binding: Resolved
• Address review comments for Kafka model that came after patch got committed.: Resolved
• Make Kafka dependency as provided: Resolved
• Get service name from Kafka's server properties.: Resolved
• Restrict Kafka Cluster authorizable to only have "kafka-cluster" as authorizable's name.: Resolved
• Add implementations for acls' CRUD: Resolved
• Fix test failures due to missing files.: Resolved
• Add end-to-end tests for Kafka: Resolved
• Rebase on master: Resolved
• Merge kafka branch into trunk: Resolved
• Add shell for Sentry Kafka integration: Resolved
• Fixes to get kerberos auth work.: Resolved
• Enable dist for kafka-binding: Resolved
• Rename kafka.superusers -> super.users based on kafka docs: Resolved
• Make Kafka resources/ Kafka Model case sensitive: Resolved
• Add caching to avoid huge performance hit: Resolved
• Make HOST implied in privileges if not specified explicitly.: Resolved
• Fix PMD tag for unused field.: Resolved
• Document for Sentry Kafka integration: Resolved