kafka-gitops
kafka-gitops copied to clipboard
kafka-gitops fails during account creation when ccloud uses SSO
Currently I am planning on using this tool on an environment where the authentication with ccloud is actually done through SSO. Our subscription is activated using Azure AAD as our identity source. As such, login with XX_CCLOUD_EMAIL and XX_CCLOUD_PASSWORD is not possible. It is worth noting that currently I am using ccloud clusters that have internet broker endpoints.
To try and circumvent this, I went through all the sign-in process using ccloud login --no-browser --save. This validates my flow and eventually results in a stored and valid login. From here I can use ccloud create topics and service accounts.
after setting the appropriate variables in by bash session, I notice that account creation fails while suggesting that I am not logged into ccloud. Logs below
kafka-gitops --verbose -f sit-state.yaml account
Creating service accounts...
08:54:28.915 [main] INFO com.devshawn.kafka.gitops.config.KafkaGitopsConfigLoader - Kafka Config: {zookeeper.connect=, bootstrap.servers=<REDACTED>.azure.confluent.cloud:9092, advertised.listeners=, client.id=kafka-gitops}
08:54:29.011 [main] INFO com.devshawn.kafka.gitops.service.ConfluentCloudService - Using ccloud executable at: ccloud
08:54:29.013 [main] INFO com.devshawn.kafka.gitops.service.ParserService - Parsing desired state file...
08:54:32.615 [main] INFO com.devshawn.kafka.gitops.service.ConfluentCloudService - Fetching service account list from Confluent Cloud via ccloud tool.
08:54:35.114 [main] INFO com.devshawn.kafka.gitops.service.ConfluentCloudService - No content to map due to end-of-input
at [Source: (String)""; line: 1, column: 0]
[ERROR] There was an error listing Confluent Cloud service accounts. Are you logged in?
I also validate that through ccloud I am able to list the service-accounts, currently empty for a new cluster.
ccloud service-account list
Id | Name | Description
+----+------+-------------+