このコンテンツは選択した言語では利用できません。
Chapter 1. Configuring the SASL inspection filter
This procedure describes how to set up the SASL Inspection filter by configuring it in Streams for Apache Kafka Proxy.
Prerequisites
- An instance of Streams for Apache Kafka Proxy. For information on deploying Streams for Apache Kafka Proxy, see the Deploying and Managing Streams for Apache Kafka Proxy on OpenShift guide.
Procedure
Configure a
SaslInspectiontype filter.-
In an OpenShift deployment using a
KafkaProtocolFilterresource. See Section 1.1, “ExampleKafkaProtocolFilterresource”
-
In an OpenShift deployment using a
1.1. Example KafkaProtocolFilter resource リンクのコピーリンクがクリップボードにコピーされました!
If your instance of Streams for Apache Kafka Proxy runs on OpenShift, you must use a KafkaProtocolFilter resource to define the filter configuration.
The following example shows a complete filterDefinitions entry that is configured for OAUTHBEARER validation:
-
enabledMechanismsrestricts the filter to the given SASL mechanisms. Refer to SASL mechanism names listed in the supported mechanisms table. If this field is omitted, the filter enablesSCRAM-SHA-256,SCRAM-SHA-512, andOAUTHBEARERby default. -
If
requireAuthenticationistruethen successful authentication is required before the filter forwards any requests other than those strictly required to perform SASL authentication. Iffalse, the filter forwards all requests regardless of whether SASL authentication has been attempted or was successful. The default value isfalse.
Refer to the Deploying and Managing Streams for Apache Kafka Proxy on OpenShift guide for more information about configuration on OpenShift.