Springboot Kafka autoconfiguration - SSLBundle for SASL_PLAINTEXT with SCRAM-SHA-512

[radu-barbu-sage]

Since SpringBoot version 3.2 Kafka autoconfiguration is deprecated and marked for removal in version 3.4 https://docs.spring.io/spring-boot/docs/current/api/org/springframework/boot/autoconfigure/kafka/KafkaProperties.html#buildAdminProperties() and it is recommended to use SSLBundles.

As we are connecting to Kafka cluster using SASL_PLAINTEXT with SCRAM-SHA-512

  kafka:
    security:
      protocol: SASL_PLAINTEXT
    bootstrap-servers: adress_of_the_server
    properties:
      sasl:
        mechanism: SCRAM-SHA-512
        jaas:
          config: org.apache.kafka.common.security.scram.ScramLoginModule required username="username" password="password";
    jaas:
      enabled: true

how should I configure SslBundle for SASL_PLAINTEXT with SCRAM-SHA-512?

[wilkinsona]

Unfortunately, I don't think I understand the question and how it connects to your snippet of YAML above.

If you don't have any code that's using KafkaProperties then you don't need to do anything. If you're calling buildAdminProperties(), you can call buildAdminProperties(null) instead, but you should note that methods on Boot's @ConfigurationProperties classes aren't really intended for use as public API.

Can you please clarify exactly how you're configuring things today and why you think the deprecation of buildAdminProperties() will affect you?

[radu-barbu-sage]

Sorry for the late response. We need KafkaProperties for building consumer and producer properties. Properties are altered based on the needs of different producers and consumers.

To clarify my question: calling buildAdminProperties(null) is the equivalent of the deprecated buildAdminProperties()?

[wilkinsona]

Yes, it is:

spring-boot/spring-boot-project/spring-boot-autoconfigure/src/main/java/org/springframework/boot/autoconfigure/kafka/KafkaProperties.java

Lines 250 to 252 in 40c188f

	public Map<String, Object> buildAdminProperties() {
	return buildAdminProperties(null);
	}

[radu-barbu-sage]

Ok, thanks for clarifications. Just a side question, why deprecating buildAdminProperties? What is the benefit between buildAdminProperties(null) and buildAdminProperties. Same for buildConsumerProperties and buildProducerProperties.

[wilkinsona]

As I said above "methods on Boot's @ConfigurationProperties classes aren't really intended for use as public API" and buildAdminProperties() is no longer needed as Boot will always call buildAdminProperties(SslBundle) either with null or an SslBundle instance.

I'd still like to know why you're calling buildAdminProperties (and buildConsumerProperties and buildProducerProperties by the sounds of it). There may be a better way to do what you're doing or it may be an indicator that we need to provide a truly public API to meet your needs.