kafka-ui icon indicating copy to clipboard operation
kafka-ui copied to clipboard

Support for awsRoleArn when using IAM

Open ompraash opened this issue 1 year ago • 4 comments

Issue submitter TODO list

  • [X] I've searched for an already existing issues here
  • [X] I'm running a supported version of the application which is listed here and the feature is not present there

Is your proposal related to a problem?

In the current scenario IAM connectivity to MSK only supports awsProfileName. As per MSK IAM Auth library, awsRoleArn is supported.

kafka:
  clusters:
    - name: local
      bootstrapServers: <KAFKA_URL>
      properties:
        security.protocol: SASL_SSL
        sasl.mechanism: AWS_MSK_IAM
        sasl.client.callback.handler.class: software.amazon.msk.auth.iam.IAMClientCallbackHandler
        sasl.jaas.config: software.amazon.msk.auth.iam.IAMLoginModule required awsProfileName="<PROFILE_NAME>";

In the documentation, it does not mention use of IAM Role.

Describe the feature you're interested in

Allow support for awsRoleArn similar to awsProfileName thus allowing to automatically trust Role ARN.

Describe alternatives you've considered

No response

Version you're running

1.0.0

Additional context

No response

ompraash avatar Oct 31 '24 04:10 ompraash

Hi ompraash! 👋

Welcome, and thank you for opening your first issue in the repo!

Please wait for triaging by our maintainers.

As development is carried out in our spare time, you can support us by sponsoring our activities or even funding the development of specific issues. Sponsorship link

If you plan to raise a PR for this issue, please take a look at our contributing guide.

github-actions[bot] avatar Oct 31 '24 04:10 github-actions[bot]

porting the PR from our glue serde might work: https://github.com/kafbat/ui-serde-glue/pull/45/files

Haarolean avatar Mar 19 '25 11:03 Haarolean

It seems the issue is about a missing field in the config wizard. This is good for grabs, around 1h effort.

Haarolean avatar May 14 '25 10:05 Haarolean

@Haarolean

Can you please assign this issue to me?

ankitk-me avatar May 21 '25 06:05 ankitk-me

Absolutely, @ankitk-me! Feel free to jump in and contribute!

germanosin avatar Jun 11 '25 10:06 germanosin

@ankitk-me sure, sorry for the delay!

Haarolean avatar Jun 11 '25 10:06 Haarolean

Thank you @germanosin & @Haarolean .

I have raise a PR : https://github.com/kafbat/kafka-ui/pull/1144 for this.

Also Doc PR for the same: https://github.com/kafbat/ui-docs/pull/61

But unable to add any reviewer manually. Can you please help with the review?

ankitk-me avatar Jun 21 '25 05:06 ankitk-me