此内容没有您所选择的语言版本。

Chapter 1. Configuring the SASL inspection filter


This procedure describes how to set up the SASL Inspection filter by configuring it in Streams for Apache Kafka Proxy.

Prerequisites

Procedure

  1. Configure a SaslInspection type filter.

1.1. Example KafkaProtocolFilter resource

If your instance of Streams for Apache Kafka Proxy runs on OpenShift, you must use a KafkaProtocolFilter resource to define the filter configuration.

The following example shows a complete filterDefinitions entry that is configured for OAUTHBEARER validation:

kind: KafkaProtocolFilter
metadata:
  name: my-sasl-inspection-filter
spec:
  type: SaslInspection
  configTemplate:
    enabledMechanisms: [ "OAUTHBEARER" ]
    requireAuthentication: true
  • enabledMechanisms restricts the filter to the given SASL mechanisms. Refer to SASL mechanism names listed in the supported mechanisms table. If this field is omitted, the filter enables SCRAM-SHA-256, SCRAM-SHA-512, and OAUTHBEARER by default.
  • If requireAuthentication is true then successful authentication is required before the filter forwards any requests other than those strictly required to perform SASL authentication. If false, the filter forwards all requests regardless of whether SASL authentication has been attempted or was successful. The default value is false.

Refer to the Deploying and Managing Streams for Apache Kafka Proxy on OpenShift guide for more information about configuration on OpenShift.

Red Hat logoGithubredditYoutubeTwitter

学习

尝试、购买和销售

社区

关于红帽文档

通过我们的产品和服务,以及可以信赖的内容,帮助红帽用户创新并实现他们的目标。 了解我们当前的更新.

让开源更具包容性

红帽致力于替换我们的代码、文档和 Web 属性中存在问题的语言。欲了解更多详情,请参阅红帽博客.

關於紅帽

我们提供强化的解决方案,使企业能够更轻松地跨平台和环境(从核心数据中心到网络边缘)工作。

Theme

© 2026 Red Hat
返回顶部