Chapter 91. KafkaClientAuthenticationCustom schema reference

Used in: KafkaBridgeSpec, KafkaConnectSpec, KafkaMirrorMaker2ClusterSpec

Full list of KafkaClientAuthenticationCustom schema properties

To configure custom client authentication, set the type property to custom. Custom client authentication allows you to use any type of Kafka-supported authentication mechanism. This authentication option is especially useful with third-party Apache Kafka services, such as Amazon MSK, that require their own authentication mechanisms.

  authentication:
    type: custom
    sasl: true
    config:
      sasl.mechanism: AWS_MSK_IAM
      sasl.jaas.config: software.amazon.msk.auth.iam.IAMLoginModule required;
      sasl.client.callback.handler.class: software.amazon.msk.auth.iam.IAMClientCallbackHandler

  authentication:
    type: custom
    sasl: true
    config:
      sasl.mechanism: AWS_MSK_IAM
      sasl.jaas.config: software.amazon.msk.auth.iam.IAMLoginModule required;
      sasl.client.callback.handler.class: software.amazon.msk.auth.iam.IAMClientCallbackHandler

The config section accepts only options that start with the prefixes sasl. and ssl.keystore.. All other options are ignored. To configure additional options, use the related properties of the Streams for Apache Kafka custom resource, such as .spec.config or .spec.tls. The security.protocol `setting is generated automatically from the `sasl property (when you use custom authentication) and the tls configuration in the same Streams for Apache Kafka custom resource: