Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

changefeedccl: support kerberos auth for changefeed kafka sink #44603

Open
chriscasano opened this issue Jan 31, 2020 · 8 comments
Open

changefeedccl: support kerberos auth for changefeed kafka sink #44603

chriscasano opened this issue Jan 31, 2020 · 8 comments
Assignees
@abhinavg6
Labels
A-cdc Change Data Capture A-security C-enhancement Solution expected to add code/behavior + preserve backward-compat (pg compat issues are exception) T-server-and-security DB Server & Security

Comments

@chriscasano
Copy link

chriscasano commented Jan 31, 2020 •
edited by cockroach-jira-scripts
Loading

Customer request to have Kerberos auth for Kafka sink in Changefeed. They have multiple scenarios for using changefeeds for audit events, table replication and other triggering events. All production Kafka clusters us Kerberos and they can not migrate current app to production without this. We would have to consider how we add Kerberos service name, credentials service, principal and key tab as part to the Create Changeed statement. I haven’t tested but looks like Sarama supports Kerberos: IBM/sarama#1366

gz#4609

gz#7784

Jira issue: CRDB-5216
@knz knz added A-security C-enhancement Solution expected to add code/behavior + preserve backward-compat (pg compat issues are exception) labels Feb 1, 2020
@knz
Copy link
Contributor

knz commented Feb 1, 2020

cc @nstewart for triage

@RoachietheSupportRoach
Copy link
Collaborator

Zendesk ticket #4609 has been linked to this issue.

@mwang1026 mwang1026 added the A-cdc Change Data Capture label Feb 4, 2020
@BramGruneir
Copy link
Member

@mwang1026 or @thtruo, any movement on this?

@knz
Copy link
Contributor

knz commented May 28, 2021

Wasn't this achieved already?
@stevendanna @dt ?

@shermanCRL
Copy link
Contributor

See IBM/sarama#1366

@knz
Copy link
Contributor

knz commented Jun 1, 2021

@shermanCRL thanks, but how does this answer the question? Was the outcome from crdb's perspective achieved or not? In which version? Our CEAs would like to know.

@stevendanna
Copy link
Collaborator

No, we do not currently support this. We added support for SCRAM as a new SASL authentication method but not GSSAPI.

@jlinder jlinder added the T-server-and-security DB Server & Security label Jun 16, 2021
@amruss amruss changed the title Support Kerberos auth for Changefeed Kafka Sink changefeedccl: support kerberos auth for changefeed kafka sink Sep 1, 2021
@BramGruneir
Copy link
Member

@amruss, any chance of resurrecting this? I'm hearing from users who still really want this integration.

@exalate-issue-sync exalate-issue-sync bot assigned abhinavg6 and unassigned amruss, mwang1026 and thtruo Aug 10, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@abhinavg6 abhinavg6

Labels
A-cdc Change Data Capture A-security C-enhancement Solution expected to add code/behavior + preserve backward-compat (pg compat issues are exception) T-server-and-security DB Server & Security
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests