Re: Accessing TLS certs and keys from Vault into Kafka

2021-11-18 Thread Martin Gainty
; capability for your specific Operating System martin From: sai chandra mouli Sent: Thursday, November 18, 2021 2:35 AM To: users@kafka.apache.org Subject: Accessing TLS certs and keys from Vault into Kafka Hello, I have a use case where I am using a vault like

Accessing TLS certs and keys from Vault into Kafka

2021-11-18 Thread sai chandra mouli
Hello, I have a use case where I am using a vault like ansible vault to encrypt and store my SSL related files (certs and Keys) for other existing applications. And I would like to know if it's possible to use the same vault with Kafka SSL without creating jks, pkcs12 or pem files outside the vaul

Re: Re: Accessing TLS certs and keys from Vault into Kafka

2021-11-18 Thread Luke Chen
Hello, > can you provide any existing implementations for reference? You can check the `FileConfigProvider` in clients/src/main/java/org/apache/kafka/common/config/provider/FileConfigProvider.java. Or check the repo: https://github.com/jcustenborder/kafka-config-provider-vault Hope this helps. T

RE: Re: Accessing TLS certs and keys from Vault into Kafka

2021-11-18 Thread sai chandra mouli
Okay. Thank you very much for the information. If it's not too much trouble can you provide any existing implementations for reference? Also, I would like to ask about the LDAP implementation of kafka. Is it true that we have to write our own ldaphandler in order to use LDAP with apache kafka? Or

Re: Accessing TLS certs and keys from Vault into Kafka

2021-11-18 Thread Rajini Sivaram
You can add a Vault provider for externalized configs by implementing a ` org.apache.kafka.common.config.provider.ConfigProvider`.Details are in https://cwiki.apache.org/confluence/display/KAFKA/KIP-297%3A+Externalizing+Secrets+for+Connect+Configurations and https://cwiki.apache.org/confluence/page

Accessing TLS certs and keys from Vault into Kafka

2021-11-18 Thread sai chandra mouli
Hello, I have a use case where I am using a vault like ansible vault to encrypt and store my SSL related files (certs and Keys) for other existing applications. And I would like to know if it's possible to use the same vault with Kafka SSL without creating jks, pkcs12 or pem files outside the vaul