Chapter 74. KafkaClientAuthenticationScramSha256 schema reference
Used in: KafkaBridgeSpec, KafkaConnectSpec, KafkaMirrorMaker2ClusterSpec, KafkaMirrorMakerConsumerSpec, KafkaMirrorMakerProducerSpec
Full list of KafkaClientAuthenticationScramSha256 schema properties
To configure SASL-based SCRAM-SHA-256 authentication, set the type property to scram-sha-256. The SCRAM-SHA-256 authentication mechanism requires a username and password.
74.1. username Copy linkLink copied to clipboard!
Specify the username in the username property.
74.2. passwordSecret Copy linkLink copied to clipboard!
In the passwordSecret property, specify a link to a Secret containing the password.
You can use the secrets created by the User Operator.
If required, you can create a text file that contains the password, in cleartext, to use for authentication:
echo -n PASSWORD > MY-PASSWORD.txt
echo -n PASSWORD > MY-PASSWORD.txt
You can then create a Secret from the text file, setting your own field name (key) for the password:
oc create secret generic MY-CONNECT-SECRET-NAME --from-file=MY-PASSWORD-FIELD-NAME=./MY-PASSWORD.txt
oc create secret generic MY-CONNECT-SECRET-NAME --from-file=MY-PASSWORD-FIELD-NAME=./MY-PASSWORD.txt
Example Secret for SCRAM-SHA-256 client authentication for Kafka Connect
The secretName property contains the name of the Secret, and the password property contains the name of the key under which the password is stored inside the Secret.
Do not specify the actual password in the password property.
Example SASL-based SCRAM-SHA-256 client authentication configuration for Kafka Connect
74.3. KafkaClientAuthenticationScramSha256 schema properties Copy linkLink copied to clipboard!
| Property | Property type | Description |
|---|---|---|
| passwordSecret |
Reference to the | |
| type | string |
Must be |
| username | string | Username used for the authentication. |