You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@kafka.apache.org by Jaikiran Pai <ja...@gmail.com> on 2015/10/24 01:42:18 UTC
(User) Document/guide on new Kafka features on security in upcoming
0.9.0?
Given that 0.9.0 is being planned to released sometime soon in November,
our team has started looking into what's coming in the newer version and
what we need to do to start using the features. We are very much and
mainly interested in the security features of it for the upcoming
releases. We have been watching some of the KIP discussion threads and
the KIP articles around security[1][2]. However, those are very much
like design discussions/rationale. Is there some document which explains
to end users of Kafka to understand what security features have been
implemented for this release and what needs to be done to start using those?
The reason I ask for these now, before the release, is so that some of
us can start testing these out before the release and raise any issues
that we might run into.
[1]
https://cwiki.apache.org/confluence/display/KAFKA/KIP-11+-+Authorization+Interface
[2]
https://cwiki.apache.org/confluence/display/KAFKA/Security#Security-Authorization
-Jaikiran
Re: (User) Document/guide on new Kafka features on security in
upcoming 0.9.0?
Posted by Ismael Juma <is...@juma.me.uk>.
Hi Jaikan,
Testing before the release is very much appreciated. As Harsha said,
user-focused documentation is still in-progress. In addition to the SSL
wiki page that Harsha mentioned, Parth wrote a wiki page for the
kafka-acls.sh tool:
https://cwiki.apache.org/confluence/display/KAFKA/Kafka+Authorization+Command+Line+Interface
There is also a KIP for ZooKeeper authentication:
https://cwiki.apache.org/confluence/display/KAFKA/KIP-38%3A+ZooKeeper+Authentication
In terms of the various security features that will be in 0.9 (SSL
authentication and encryption, SASL/Kerberos authentication, ACL
authorization, ZooKeeper authentication), which are of interest to you?
Ismael
On Sat, Oct 24, 2015 at 4:35 AM, Harsha <ka...@harsha.io> wrote:
> Jaikiran,
> Here is the SSL setup doc
>
> https://cwiki.apache.org/confluence/display/KAFKA/Deploying+SSL+for+Kafka
> .
> I am going to write one for SASL ( kerberos ) soon and Parth is working
> on pushing one for Authorizer as well.
>
> Thanks,
> Harsha
>
> On Fri, Oct 23, 2015, at 04:42 PM, Jaikiran Pai wrote:
> > Given that 0.9.0 is being planned to released sometime soon in November,
> > our team has started looking into what's coming in the newer version and
> > what we need to do to start using the features. We are very much and
> > mainly interested in the security features of it for the upcoming
> > releases. We have been watching some of the KIP discussion threads and
> > the KIP articles around security[1][2]. However, those are very much
> > like design discussions/rationale. Is there some document which explains
> > to end users of Kafka to understand what security features have been
> > implemented for this release and what needs to be done to start using
> > those?
> >
> > The reason I ask for these now, before the release, is so that some of
> > us can start testing these out before the release and raise any issues
> > that we might run into.
> >
> > [1]
> >
> https://cwiki.apache.org/confluence/display/KAFKA/KIP-11+-+Authorization+Interface
> > [2]
> >
> https://cwiki.apache.org/confluence/display/KAFKA/Security#Security-Authorization
> >
> > -Jaikiran
>
Re: (User) Document/guide on new Kafka features on security in upcoming
0.9.0?
Posted by Harsha <ka...@harsha.io>.
Jaikiran,
Here is the SSL setup doc
https://cwiki.apache.org/confluence/display/KAFKA/Deploying+SSL+for+Kafka
.
I am going to write one for SASL ( kerberos ) soon and Parth is working
on pushing one for Authorizer as well.
Thanks,
Harsha
On Fri, Oct 23, 2015, at 04:42 PM, Jaikiran Pai wrote:
> Given that 0.9.0 is being planned to released sometime soon in November,
> our team has started looking into what's coming in the newer version and
> what we need to do to start using the features. We are very much and
> mainly interested in the security features of it for the upcoming
> releases. We have been watching some of the KIP discussion threads and
> the KIP articles around security[1][2]. However, those are very much
> like design discussions/rationale. Is there some document which explains
> to end users of Kafka to understand what security features have been
> implemented for this release and what needs to be done to start using
> those?
>
> The reason I ask for these now, before the release, is so that some of
> us can start testing these out before the release and raise any issues
> that we might run into.
>
> [1]
> https://cwiki.apache.org/confluence/display/KAFKA/KIP-11+-+Authorization+Interface
> [2]
> https://cwiki.apache.org/confluence/display/KAFKA/Security#Security-Authorization
>
> -Jaikiran