Skip to content

Release vmini-runtime-1.75.3

Choose a tag to compare

@github-actions github-actions released this 16 Oct 08:19
· 12008 commits to master since this release
fd0f92c
Support Amazon MSK IAM authentication for mini-runtime Kafka (#6704)

* Support Amazon MSK IAM authentication for mini-runtime Kafka clients

KAFKA_AUTH_ENABLED=true with AKTO_KAFKA_SASL_MECHANISM=AWS_MSK_IAM makes the
runtime authenticate to MSK with its AWS identity (e.g. the ECS task role)
instead of a username/password.

- KafkaConfig: AWS_MSK_IAM mechanism and IAM client properties; all runtime
  clients go through addValidatedAuthenticationProperties so they pick it up
- Detection corrector admin/producer/consumer now apply the env-driven Kafka
  auth; they connect to the same Kafka as the runtime and had no auth before
- Add aws-msk-iam-auth 2.3.7 "all" jar with transitive deps excluded, so the
  runtime's dependency versions (Jackson, HttpClient, kafka-clients) are unchanged

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

* Run KafkaConfigTest under JUnit 5 and cover detection corrector auth

libs/utils' surefire setup skips JUnit 4 tests (vintage engine 5.4.2 cannot
parse junit 4.13.1), so KafkaConfigTest never ran in CI. Switch it to JUnit 5
and add two tests that build the detection corrector publisher and a stopped
worker, exercising their Kafka auth lines without connecting to Kafka.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 5.5 (1M context) <noreply@anthropic.com>