confluentinc / ide-sidecar

Sidecar application used by Confluent for VS Code, as a local proxy for Confluent Cloud, Confluent Platform and local Kafka clusters, to help users build streaming applications.
Apache License 2.0
3 stars 3 forks source link

Add Kerberos (SSL/GSSAPI) authN to direct connections #127

Open rhauch opened 2 weeks ago

rhauch commented 2 weeks ago

Continuation of #124, #125, and #126 that added basic, mTLS and OAuth 2.0 authN support to direct connections.

We want to add Kerberos (SSL/GSSAPI) support to direct connections (similar to basic creds) via the kafka_cluster and schema_registry definitions, and use this to connect to downstream resources (e.g., Kafka REST API, SR API endpoints, and Message Consumer API). All secrets in credentials will be write-only: the Connection REST API endpoints must always mask secrets.

We'll track adding support for other credential types in separate issues: