search

Dabz / kafka-security-playbook

Example of different security configurations for Apache Kafka and the Confluent Platform
https://docs.confluent.io/current/security/index.html
181 stars 75 forks source link

Produce and Consume data with SR and different kinds of certificates #39

Closed purbon closed 4 years ago

purbon commented 4 years ago

There is no easy way to disable host verification in Schema Registry when required. This is clearly not recommend and a security anti pattern, however in some cases this would have to be done as a solution to keep moving until proper certificates can be setup.

This PR adds to the schema registry playbook examples of using the mTLS (https) and http apis with certs that:

purbon commented 4 years ago

@Dabz what do you think?

Dabz commented 4 years ago

This PR has been open for too long as well, I will blindly trust you ;) I quickly had a look, it looks good to me.

We have some conflicts now :/ @purbon can you resolve the conflict and I will merge?

purbon commented 4 years ago

actually I think I will close it for now, we should not introduce bad practises here, right? :-) helpful, but not for now...