kafka-ui icon indicating copy to clipboard operation
kafka-ui copied to clipboard

SSO for MSK with IAM authentication

Open kothapet opened this issue 1 year ago • 5 comments

Issue submitter TODO list

  • [X] I've searched for an already existing issues here
  • [X] I'm running a supported version of the application which is listed here and the feature is not present there

Is your proposal related to a problem?

I am using MSK with IAM authentication. Want to run kafka ui on ec2/ecs/eks. If I attach an IAM role to the instance, then every user will get the same privileges.

Describe the feature you're interested in

For AWS console login we use AD group and SAML token exchange for AWS credentials. I want something similar for kafka ui, ability to pass the aws credentials when user login and those credentials only valid for that session. I am not sure how to do this and if it is supported. If so is there an example on how to do this.

Describe alternatives you've considered

No response

Version you're running

56fa824

Additional context

No response

kothapet avatar Dec 22 '23 16:12 kothapet

Hello there kothapet! 👋

Thank you and congratulations 🎉 for opening your very first issue in this project! 💖

In case you want to claim this issue, please comment down below! We will try to get back to you as soon as we can. 👀

github-actions[bot] avatar Dec 22 '23 16:12 github-actions[bot]

This would be awesome. I'm also using MSK serverless and would love this capability.

workmanw avatar Dec 22 '23 23:12 workmanw

any updates for this ?

christrt9 avatar Feb 14 '24 10:02 christrt9

Hi @matan129, I see this issue is closed. But can you folks show me an example how would I set this up. Lets say I have two users, each attached to a different AD group (admin and dev group) and then connected to separate IAM role (admin and dev role). What would my config/yaml file will look like?

kothapet avatar Jun 11 '24 19:06 kothapet

Me and @Haarolean no longer support this repo. Don't you mind to propose your request to our repo https://github.com/kafbat/kafka-ui

germanosin avatar Jul 08 '24 08:07 germanosin