Skip to content

KSM 2.0.0

Latest
Latest

Choose a tag to compare

View all tags
@sderosiaux sderosiaux released this 12 Oct 12:47
· 2 commits to master since this release
v2.0.0
e4e0737
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

KSM 2.0.0 replaces the Scala implementation with Java 25 LTS and Kafka's public Admin API.

  • Keeps CSV/YAML policies, built-in sources, notifications and execution modes.
  • Rejects invalid policies before changing ACLs, fixes YAML Produce permissions and exports, and recovers from source and Kafka failures.
  • Adds a real --dry-run, nonzero failure exit codes and tested amd64/arm64 distributions.
  • Updates configuration, migration, compatibility and Conduktor RBAC/self-service documentation.

Before upgrading: Java 25 is required outside Docker. Direct ZooKeeper configuration is removed, custom Scala extensions must be ported, and YAML Produce now grants topic permissions only. Read the migration guide, export existing ACLs and review a dry-run. The policy remains authoritative for every ACL visible to KSM, including its own management permissions.

Docker: docker pull conduktor/kafka-security-manager:v2.0.0 (linux/amd64 and linux/arm64). latest now follows KSM 2; historical v1.x-release tags remain available.

Downloads: executable JAR, ZIP and tar.gz below, with SHA-256 checksums and a qualification report. Distributed through GitHub and Docker Hub; Maven Central publishing is not configured.

Qualification: 73 Java tests, 4 download/cache tests, 35 real Kafka/security combinations, 6 failure scenarios, and native Docker tests on both architectures. Exact Kafka versions: 2.8.2, 3.9.2, 4.0.2, 4.1.2, 4.2.2 and 4.3.1. See the CI run and testing details.

Assets 7
Loading