Chapter 2. Enhancements

For an overview of the enhancements introduced with Kafka 3.4.0, refer to the Kafka 3.4.0 Release Notes.

You can now use configuration to control HTTP requests to an OAuth 2.0 authorization server.

If you are creating a listener for your Kafka brokers that uses OAuth 2.0 authentication or authorization, you can add the following properties to the listener configuration:

You can also use the properties when configuring OAuth 2.0 authentication for Kafka components.

apiVersion: kafka.strimzi.io/v1beta2
kind: Kafka
metadata:
  name: my-cluster
spec:
  kafka:
    replicas: 3
    version: 3.4.0
    # ...
    listeners:
      - name: external
        port: 9094
        type: loadbalancer
        tls: true
        authentication:
          type: oauth
          # ...
          httpRetries: 2
          httpRetryPauseMs: 300
    # ...

See the following:

If you are using OPA for authorized access to your Kafka brokers, you can now configure an encrypted HTTPS connection to access the OPA server. Add trusted certificates to your OPA configuration using the tlsTrustedCertificates property.

apiVersion: kafka.strimzi.io/v1beta2
kind: Kafka
metadata:
  name: my-cluster
  namespace: myproject
spec:
  kafka:
    # ...
    authorization:
      type: opa
      # ...
      tlsTrustedCertificates:
        - secretName: opa-server-ca
          certificate: tls.crt
    # ...

See KafkaAuthorizationOpa schema reference.