|
|
|
KAFKA-2794
|
KAFKA-1682
Add group support for authorizer acls
|
Parth Brahmbhatt
|
Parth Brahmbhatt
|
|
In Progress |
Unresolved
|
|
|
|
|
|
|
|
KAFKA-2724
|
KAFKA-1682
Document ZooKeeper authentication
|
Flavio Paiva Junqueira
|
Flavio Paiva Junqueira
|
|
Resolved |
Fixed
|
|
|
|
|
|
|
|
KAFKA-2711
|
KAFKA-1682
SaslClientAuthenticator no longer needs KerberosNameParser in constructor
|
Ismael Juma
|
Jun Rao
|
|
Resolved |
Fixed
|
|
|
|
|
|
|
|
KAFKA-2693
|
KAFKA-1682
Run relevant ducktape tests with SASL/PLAIN and multiple mechanisms
|
Rajini Sivaram
|
Rajini Sivaram
|
|
Resolved |
Fixed
|
|
|
|
|
|
|
|
KAFKA-2692
|
KAFKA-1682
Add ducktape tests for SASL/Kerberos
|
Unassigned
|
Rajini Sivaram
|
|
Open |
Unresolved
|
|
|
|
|
|
|
|
KAFKA-2691
|
KAFKA-1682
Improve handling of authorization failure during metadata refresh
|
Jason Gustafson
|
Ismael Juma
|
|
Resolved |
Fixed
|
|
|
|
|
|
|
|
KAFKA-2690
|
KAFKA-1682
Protect passwords from logging
|
Jakub Nowak
|
Ismael Juma
|
|
Resolved |
Fixed
|
|
|
|
|
|
|
|
KAFKA-2682
|
KAFKA-1682
Authorization section in official docs
|
Parth Brahmbhatt
|
Ismael Juma
|
|
Resolved |
Fixed
|
|
|
|
|
|
|
|
KAFKA-2681
|
KAFKA-1682
SASL authentication in official docs
|
Harsha
|
Ismael Juma
|
|
Resolved |
Fixed
|
|
|
|
|
|
|
|
KAFKA-2675
|
KAFKA-1682
SASL/Kerberos follow-up
|
Ismael Juma
|
Ismael Juma
|
|
Resolved |
Fixed
|
|
|
|
|
|
|
|
KAFKA-2658
|
KAFKA-1682
Implement SASL/PLAIN
|
Rajini Sivaram
|
Rajini Sivaram
|
|
Resolved |
Duplicate
|
|
|
|
|
|
|
|
KAFKA-2644
|
KAFKA-1682
Run relevant ducktape tests with SASL_PLAINTEXT and SASL_SSL
|
Rajini Sivaram
|
Ismael Juma
|
|
Resolved |
Fixed
|
|
|
|
|
|
|
|
KAFKA-2643
|
KAFKA-1682
Run mirror maker tests in ducktape with SSL and SASL
|
Rajini Sivaram
|
Rajini Sivaram
|
|
Resolved |
Fixed
|
|
|
|
|
|
|
|
KAFKA-2642
|
KAFKA-1682
Run replication tests in ducktape with SSL for clients
|
Rajini Sivaram
|
Rajini Sivaram
|
|
Resolved |
Fixed
|
|
|
|
|
|
|
|
KAFKA-2641
|
KAFKA-1682
Upgrade path for ZK authentication
|
Flavio Paiva Junqueira
|
Flavio Paiva Junqueira
|
|
Resolved |
Fixed
|
|
|
|
|
|
|
|
KAFKA-2640
|
KAFKA-1682
Add tests for ZK authentication
|
Flavio Paiva Junqueira
|
Flavio Paiva Junqueira
|
|
Resolved |
Fixed
|
|
|
|
|
|
|
|
KAFKA-2639
|
KAFKA-1682
Refactoring of ZkUtils
|
Flavio Paiva Junqueira
|
Flavio Paiva Junqueira
|
|
Resolved |
Fixed
|
|
|
|
|
|
|
|
KAFKA-2610
|
KAFKA-1682
Metrics for SSL handshake
|
Unassigned
|
Ismael Juma
|
|
Open |
Unresolved
|
|
|
|
|
|
|
|
KAFKA-2598
|
KAFKA-1682
Add Test with authorizer for producer and consumer
|
Parth Brahmbhatt
|
Parth Brahmbhatt
|
|
Resolved |
Fixed
|
|
|
|
|
|
|
|
KAFKA-2582
|
KAFKA-1682
ConsumerMetdata authorization error not returned to user
|
Jason Gustafson
|
Jason Gustafson
|
|
Resolved |
Fixed
|
|
|
|
|
|
|
|
KAFKA-2581
|
KAFKA-1682
Run some existing ducktape tests with SSL-enabled clients and brokers
|
Rajini Sivaram
|
Rajini Sivaram
|
|
Resolved |
Fixed
|
|
|
|
|
|
|
|
KAFKA-2579
|
KAFKA-1682
Unauthorized clients should not be able to join groups
|
Jason Gustafson
|
Jason Gustafson
|
|
Resolved |
Fixed
|
|
|
|
|
|
|
|
KAFKA-2456
|
KAFKA-1682
Disable SSLv3 for ssl.enabledprotocols config on client & broker side
|
Ismael Juma
|
Harsha
|
|
Resolved |
Fixed
|
|
|
|
|
|
|
|
KAFKA-2441
|
KAFKA-1682
SSL/TLS in official docs
|
Harsha
|
Ismael Juma
|
|
Resolved |
Fixed
|
|
|
|
|
|
|
|
KAFKA-2440
|
KAFKA-1682
Use `NetworkClient` instead of `SimpleConsumer` to fetch data from replica
|
Ismael Juma
|
Ismael Juma
|
|
Resolved |
Fixed
|
|
|
|
|
|
|
|
KAFKA-2431
|
KAFKA-1682
Test SSL/TLS impact on performance
|
Ben Stopford
|
Ismael Juma
|
|
Resolved |
Done
|
|
|
|
|
|
|
|
KAFKA-2417
|
KAFKA-1682
Ducktape tests for SSL/TLS
|
Geoff Anderson
|
Ismael Juma
|
|
Resolved |
Fixed
|
|
|
|
|
|
|
|
KAFKA-2411
|
KAFKA-1682
remove usage of BlockingChannel in the broker
|
Ismael Juma
|
Jun Rao
|
|
Resolved |
Fixed
|
|
|
|
|
|
|
|
KAFKA-2212
|
KAFKA-1682
KafkaAuthorizer: Add CLI for Acl management.
|
Parth Brahmbhatt
|
Parth Brahmbhatt
|
|
Resolved |
Fixed
|
|
|
|
|
|
|
|
KAFKA-2211
|
KAFKA-1682
KafkaAuthorizer: Add simpleACLAuthorizer implementation.
|
Parth Brahmbhatt
|
Parth Brahmbhatt
|
|
Resolved |
Fixed
|
|
|
|
|
|
|
|
KAFKA-2210
|
KAFKA-1682
KafkaAuthorizer: Add all public entities, config changes and changes to KafkaAPI and kafkaServer to allow pluggable authorizer implementation.
|
Parth Brahmbhatt
|
Parth Brahmbhatt
|
|
Resolved |
Fixed
|
|
|
|
|
|
|
|
KAFKA-2162
|
KAFKA-1682
Kafka Auditing functionality
|
Parth Brahmbhatt
|
Harsha
|
|
Open |
Unresolved
|
|
|
|
|
|
|
|
KAFKA-1928
|
KAFKA-1682
Move kafka.network over to using the network classes in org.apache.kafka.common.network
|
Gwen Shapira
|
Jun Rao
|
|
Resolved |
Fixed
|
|
|
|
|
|
|
|
KAFKA-1882
|
KAFKA-1682
Create extendable channel interface and default implementations
|
Gwen Shapira
|
Gwen Shapira
|
|
Resolved |
Duplicate
|
|
|
|
|
|
|
|
KAFKA-1809
|
KAFKA-1682
Refactor brokers to allow listening on multiple ports and IPs
|
Gwen Shapira
|
Gwen Shapira
|
|
Resolved |
Fixed
|
|
|
|
|
|
|
|
KAFKA-1695
|
KAFKA-1682
Authenticate connection to Zookeeper
|
Parth Brahmbhatt
|
Jay Kreps
|
|
Resolved |
Fixed
|
|
|
|
|
|
|
|
KAFKA-1691
|
KAFKA-1682
new java consumer needs ssl support as a client
|
Harsha
|
Joe Stein
|
|
Resolved |
Fixed
|
|
|
|
|
|
|
|
KAFKA-1690
|
KAFKA-1682
Add SSL support to Kafka Broker, Producer and Consumer
|
Harsha
|
Joe Stein
|
|
Resolved |
Fixed
|
|
|
|
|
|
|
|
KAFKA-1688
|
KAFKA-1682
Add authorization interface and naive implementation
|
Parth Brahmbhatt
|
Jay Kreps
|
|
Resolved |
Duplicate
|
|
|
|
|
|
|
|
KAFKA-1687
|
KAFKA-1682
SASL unit tests
|
sriharsha chintalapani
|
Jay Kreps
|
|
Resolved |
Fixed
|
|
|
|
|
|
|
|
KAFKA-1686
|
KAFKA-1682
Implement SASL/Kerberos
|
Harsha
|
Jay Kreps
|
|
Resolved |
Fixed
|
|
|
|
|
|
|
|
KAFKA-1685
|
KAFKA-1682
Implement TLS/SSL tests
|
Harsha
|
Jay Kreps
|
|
Resolved |
Fixed
|
|
|
|
|
|
|
|
KAFKA-1684
|
KAFKA-1682
Implement TLS/SSL authentication
|
Harsha
|
Jay Kreps
|
|
Resolved |
Duplicate
|
|
|
|
|
|
|
|
KAFKA-1683
|
KAFKA-1682
Implement a "session" concept in the socket server
|
Gwen Shapira
|
Jay Kreps
|
|
Resolved |
Fixed
|
|
|
|
|
|
|
|
KAFKA-1477
|
KAFKA-1682
add authentication layer and initial JKS x509 implementation for brokers, producers and consumer for network communication
|
Ivan Lyutov
|
Joe Stein
|
|
Resolved |
Duplicate
|
|
|
|
|