kafka-operator icon indicating copy to clipboard operation
kafka-operator copied to clipboard
verified publisher icon stackabletech

Support custom TLS principals

Open nightkr opened this issue 1 year ago • 0 comments

A vanilla Kafka installation will use the TLS certificate's Distinguished Name (DN) as the principal, which is then used for authorization (see https://kafka.apache.org/documentation/#security_authz_ssl). This isn't great for us, since the Secret Operator will currently always hard-code this to "CN=generated certificate for pod".

We could implement a custom https://kafka.apache.org/28/javadoc/org/apache/kafka/common/security/auth/KafkaPrincipalBuilder.html to do whatever mapping we want.

nightkr avatar Jul 09 '24 11:07 nightkr