f4f8b4fa67
* Update issue templates * Update PULL_REQUEST_TEMPLATE.md * Update PULL_REQUEST_TEMPLATE.md * Update stale labels * Move files, minor updates * Moved files, minor updates * Update bug_report.md * Update feature_request.md * Add roadmap document Signed-off-by: Roman Zabaluev <rzabaluev@provectus.com> * Update SECURITY.md Signed-off-by: Roman Zabaluev <rzabaluev@provectus.com> * Update stale periods Signed-off-by: Roman Zabaluev <rzabaluev@provectus.com> * Add a stub for guidelines for QA Signed-off-by: Roman Zabaluev <rzabaluev@provectus.com> * Extract building/running instructions from the readme Signed-off-by: Roman Zabaluev <rzabaluev@provectus.com> * move testing guidelines Signed-off-by: Roman Zabaluev <rzabaluev@provectus.com> * Table of contents for contributing Signed-off-by: Roman Zabaluev <rzabaluev@provectus.com> * Add license and release badges Signed-off-by: Roman Zabaluev <rzabaluev@provectus.com> * Add info about actuator endpoints Signed-off-by: Roman Zabaluev <rzabaluev@provectus.com> * Update logotype and slogan Signed-off-by: Roman Zabaluev <rzabaluev@provectus.com> * Redone contributing guide Signed-off-by: Roman Zabaluev <rzabaluev@provectus.com> * Minor updates Signed-off-by: Roman Zabaluev <rzabaluev@provectus.com>
58 lines
1.8 KiB
Markdown
58 lines
1.8 KiB
Markdown
# How to configure SASL SCRAM Authentication
|
|
|
|
You could pass sasl configs in properties section for each cluster.
|
|
|
|
## Examples:
|
|
|
|
Please replace
|
|
- <KAFKA_NAME> with cluster name
|
|
- <KAFKA_URL> with broker list
|
|
- <KAFKA_USERNAME> with username
|
|
- <KAFKA_PASSWORD> with password
|
|
|
|
### Running From Docker Image
|
|
|
|
```sh
|
|
docker run -p 8080:8080 \
|
|
-e KAFKA_CLUSTERS_0_NAME=<KAFKA_NAME> \
|
|
-e KAFKA_CLUSTERS_0_BOOTSTRAPSERVERS=<KAFKA_URL> \
|
|
-e KAFKA_CLUSTERS_0_PROPERTIES_SECURITY_PROTOCOL=SASL_SSL \
|
|
-e KAFKA_CLUSTERS_0_PROPERTIES_SASL_MECHANISM=SCRAM-SHA-512 \
|
|
-e KAFKA_CLUSTERS_0_PROPERTIES_SASL_JAAS_CONFIG=org.apache.kafka.common.security.scram.ScramLoginModule required username="<KAFKA_USERNAME>" password="<KAFKA_PASSWORD>"; \
|
|
-d provectuslabs/kafka-ui:latest
|
|
```
|
|
|
|
### Running From Docker-compose file
|
|
|
|
```yaml
|
|
|
|
version: '3.4'
|
|
services:
|
|
|
|
kafka-ui:
|
|
image: provectuslabs/kafka-ui
|
|
container_name: kafka-ui
|
|
ports:
|
|
- "888:8080"
|
|
restart: always
|
|
environment:
|
|
- KAFKA_CLUSTERS_0_NAME=<KAFKA_NAME>
|
|
- KAFKA_CLUSTERS_0_BOOTSTRAPSERVERS=<KAFKA_URL>
|
|
- KAFKA_CLUSTERS_0_PROPERTIES_SECURITY_PROTOCOL=SASL_SSL
|
|
- KAFKA_CLUSTERS_0_PROPERTIES_SASL_MECHANISM=SCRAM-SHA-512
|
|
- KAFKA_CLUSTERS_0_PROPERTIES_SASL_JAAS_CONFIG=org.apache.kafka.common.security.scram.ScramLoginModule required username="<KAFKA_USERNAME>" password="<KAFKA_PASSWORD>";
|
|
- KAFKA_CLUSTERS_0_PROPERTIES_PROTOCOL=SASL
|
|
```
|
|
|
|
### Configuring by application.yaml
|
|
|
|
```yaml
|
|
kafka:
|
|
clusters:
|
|
- name: local
|
|
bootstrapServers: <KAFKA_URL>
|
|
properties:
|
|
security.protocol: SASL_SSL
|
|
sasl.mechanism: SCRAM-SHA-512
|
|
sasl.jaas.config: org.apache.kafka.common.security.scram.ScramLoginModule required username="<KAFKA_USERNAME>" password="<KAFKA_PASSWORD>";
|
|
```
|