confluentinc / cp-ansible

Ansible playbooks for the Confluent Platform
Apache License 2.0
42 stars 405 forks source link

[ANSIENG-4245] | scram support in kraft (#49) #1795

Closed mansi-jain-1206 closed 3 weeks ago

mansi-jain-1206 commented 1 month ago

Description

This PR adds a capability for SCRAM authentication with Kraft Controller. SCRAM authentication 1-pager

Type of change

How Has This Been Tested?

ZK Kraft oauth-rbac-mds-scram-custom-rhel Migration Migrations are working fine. Only some assertions are failing because of the migrated state.

Checklist:

confluent-cla-assistant[bot] commented 1 month ago

:tada: All Contributor License Agreements have been signed. Ready to merge.
Please push an empty commit if you would like to re-run the checks to verify CLA status for all contributors.

mansisinha commented 1 month ago

Added some comments, other than those, Please update the molecule scenarios to cover different combinations, the same combination of broker sasl scram and controller sasl plain,scram is added in every scenario. Please add a scenario with kerberos,scram and one with broker also having multiple sasl protocol

mansisinha commented 1 month ago

adding to the above, is zk to kraft migration working for the scram scenarios?

mansi-jain-1206 commented 4 weeks ago

Zk to Kraft migration is working and test for the same has been added.

mansisinha commented 4 weeks ago

Suggested a couple of minor changes, also please rename the sample inventory files to a more descriptive name, something like inter-broker_scram_kraft.yml and controller-broker_scram_kraft.yaml

mansi-jain-1206 commented 3 weeks ago

scram-rhel after merging mtls changes https://semaphore.ci.confluent.io/workflows/5bd69dd2-4102-4b9a-821c-b0423f572746?pipeline_id=6ee25f66-41c3-46ef-ae81-c23a35344f2d https://semaphore.ci.confluent.io/workflows/e622c929-b80c-4930-acea-4bb2bef85138?pipeline_id=33169db5-9174-44c9-8362-c296b2d8eca9