C0urante commented on PR #13302:
URL: https://github.com/apache/kafka/pull/13302#issuecomment-1446393595

   Hey @gharris1727, thanks for the PR. While I personally agree with the 
rationale here and would be happy to merge the changes, I think this may still 
require a KIP as it removes connectors from OOTB Connect.
   
   Some users may be relying on the `SchemaSourceConnector` as a rudimentary 
data generation tool in their own testing or development environments, and 
might be annoyed if we make it more difficult to use that connector.
   
   The description for KAFKA-14759 does mention a desire to "reduce the attack 
surface area of a default Connect installation", which may be the only reason 
we would want to merge this change without a KIP; if any of these connectors 
presents an exploit in Connect, then we'd be justified in removing them just 
like we did with the `FileStream` source and sink connectors. If you've 
identified anything like that, please let us know by emailing 
secur...@kafka.apache.org.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: jira-unsubscr...@kafka.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

Reply via email to