Skip to content

Commit

Permalink
Kafka PubSub: Document certificate authentication (#3291)
Browse files Browse the repository at this point in the history
Documents the certificate authentication method in Kafka. This method is not new, but now a dedicate authType option exists to toggle this.

Signed-off-by: Bernd Verst <github@bernd.dev>
  • Loading branch information
berndverst committed Mar 27, 2023
1 parent 992c460 commit 7b8e24f
Showing 1 changed file with 2 additions and 8 deletions.
Expand Up @@ -82,7 +82,7 @@ The `secretKeyRef` above is referencing a [kubernetes secrets store]({{< ref ku

Kafka supports a variety of authentication schemes and Dapr supports several: SASL password, mTLS, OIDC/OAuth2. With the added authentication methods, the `authRequired` field has
been deprecated from the v1.6 release and instead the `authType` field should be used. If `authRequired` is set to `true`, Dapr will attempt to configure `authType` correctly
based on the value of `saslPassword`. There are four valid values for `authType`: `none`, `password`, `mtls`, and `oidc`. Note this is authentication only; authorization is still configured within Kafka.
based on the value of `saslPassword`. There are four valid values for `authType`: `none`, `password`, `certificate`, `mtls`, and `oidc`. Note this is authentication only; authorization is still configured within Kafka.

#### None

Expand Down Expand Up @@ -275,17 +275,11 @@ spec:
- name: clientID # Optional. Used as client tracing ID by Kafka brokers.
value: "my-dapr-app-id"
- name: authType # Required.
value: "password"
- name: saslUsername # Required if authType is `password`.
value: "adminuser"
value: "certificate"
- name: consumeRetryInterval # Optional.
value: 200ms
- name: version # Optional.
value: 0.10.2.0
- name: saslPassword # Required if authRequired is `true`.
secretKeyRef:
name: kafka-secrets
key: saslPasswordSecret
- name: maxMessageBytes # Optional.
value: 1024
- name: caCert # Certificate authority certificate.
Expand Down

0 comments on commit 7b8e24f

Please sign in to comment.