search

strimzi / strimzi-kafka-oauth

OAuth2 support for Apache Kafka® to work with many OAuth2 authorization servers
Apache License 2.0
147 stars 90 forks source link

kafka 3.0 #128

Closed emaciejm closed 3 years ago

emaciejm commented 3 years ago

Have you checked the compatibility with Kafka 3.0? In my opinion, it does not work.

scholzj commented 3 years ago

On which side? Client or server?

emaciejm commented 3 years ago

The broker does not start after adding strimzi oauth libraries. I'm not 100% sure, but here could be the reason: https://issues.apache.org/jira/browse/KAFKA-12590

scholzj commented 3 years ago

So is it just the authorization? What version of the OAuth library are you using? The authentication is IMHO covered in our system tests. I think the authroization should be as well.

emaciejm commented 3 years ago

I used version 0.8.1 ( turned on: strimzi.authorization.delegate.to.kafka.acl=true) error: ERROR Exiting Kafka due to fatal exception (kafka.Kafka$) java.lang.NoClassDefFoundError: kafka/security/auth/SimpleAclAuthorizer

scholzj commented 3 years ago

Yeah, looks like we need to update some things. We will have a look at it, thanks for reporting it. The STs do not seem to cover the delegation :-/.

emaciejm commented 3 years ago

Díky moc.

scholzj commented 3 years ago

Should be fixed in 0.9.0-rc1 ... please give it a try if you want.

scholzj commented 3 years ago

Closing as the 0.9.0 is now release.

emaciejm commented 1 year ago

Hey, I would like to ask if strimzi's authentication and authorization also works with Kafka running without a zookeeper. and what to pay attention to when migrating Kafka to kraft, in the context of strimzi-auth. Thank you in advance for your answer. Regards. Maciej Malecki

mstruk commented 1 year ago

I'm starting to add tests for Kraft mode.

AFAICT the authentication part works. For Keycloak authorization there has been an issue opened #178. That will have to be fixed.