Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add SSL, SASL and security properties as editable configurations to Cluster Link resource #409

Open
emrantalukder opened this issue Aug 7, 2024 · 0 comments
Labels
bug Something isn't working

Comments

@emrantalukder
Copy link

Currently the Confluent terraform provider does not allow the provisioning of a cluster link with a custom truststore certificate. ssl.truststore.(certificates|type) is not an editable configuration property.

Config Properties Example

sasl.jaas.config=org.apache.kafka.common.security.plain.PlainLoginModule required username='kafka' password='kafka-secret';
security.protocol=SASL_SSL
sasl.mechanism=PLAIN
ssl.truststore.type=PEM
ssl.truststore.certificates=-----BEGIN CERTIFICATE----- ... -----END CERTIFICATE-----

Other supported protocols and mechanisms such as mTLS and OAuth would benefit from the enhancement of adding all ssl and security related properties:

security.protocol=SSL
ssl.truststore.type=PEM
ssl.keystore.type=PEM
ssl.keystore.certificate.chain
ssl.keystore.key
ssl.key.password
ssl.truststore.certificates

# needed for oauth
sasl.oauthbearer.token.endpoint.url
sasl.login.callback.handler.class=

This is needed when provisioning hybrid cloud/on-prem architectures and migrations.

References:
Manage Security for Cluster Linking on Confluent Cloud
resource_cluster_link.go#L83

@linouk23 linouk23 added the bug Something isn't working label Aug 7, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

2 participants