Secure Kafka cluster

[Shlomi Kiraly <sh...@myheritage.com>]

Hi,
We've started looking into working securely (encryption + authentication +
authorization) with our Kafka cluster. So far it seems that most of our
questions regarding securing the brokers and zookeeper our answered.
However - we are looking into working with Confluent's kafka-rest and
schema-registry as well.

kafka-rest and schema-registry seem to have the ability to authenticate and
communicate securely with the Kafka cluster. However, from their
documentation it seems like they don't include authentication capabilities
for their clients - effectively creating a possible security breach to the
org's Kafka cluster.
See
https://docs.confluent.io/current/kafka-rest/docs/config.html#kafkarest-config


Is there something that we're perhaps missing here ? Does anyone know if we
can configure kafka-rest proxy and schema-registry with proper
authentication ?

Thanks,
- Shlomi