|
BYOC multiple client
Binshtok, Edan <edan.binshtok@...>
Hi guys, nice to meet you. My name is Edan and im a developer for AT&T. I was checking the strimzi repo for a way to allow my different clients to bring their own cert and im missing some parts.(already reviewed https://strimzi.io/docs/latest/#installing-your-own-ca-certificates-str) So if you don’t mind helping can you explain/give example of how do I exactly do that? D) What are the min required details the client need to provide me with, is the ca.crt inaf?
Thanks I the advance, Edan Binshtok.
|
|
|
|
[ANNOUNCE] Strimzi Kafka OAuth library 0.4.0 release
Jakub Scholz
The 0.4.0 version of the Strimzi Kafka OAuth library for using OAuth authentication in Kafka clients and brokers has been released and should be available in the Maven repositories. The main improvements are: * Improved compatibility with different OAuth authorization servers * Deprecation of some configuration options * Updated dependencies * Improved examples and documentation For more information, see the release page on GitHub: https://github.com/strimzi/strimzi-kafka-oauth/releases/tag/0.4.0 Thanks to everyone who contributed to this release. Thanks & Regards Jakub
|
|
|
|
RC1 of Strimzi Kafka OAuth library 0.4.0
Jakub Scholz
Hi, Release Candidate 1 of the 0.4.0 version of the Strimzi Kafka OAuth library is now available for testing: https://github.com/strimzi/strimzi-kafka-oauth/releases/tag/0.4.0-rc1. The main changes are: * Deprecated configuration options * Compatibility improvements * Updated dependencies * Instructions for developers added * Improvements to examples and documentation To test it, you can use the staging Maven repository: <repositories> <repository> <id>staging</id> <url>https://oss.sonatype.org/content/repositories/iostrimzi-1062/</url> </repository> </repositories> Any feedback can be provided here or as a GitHub issue. Thanks & Regards Jakub
|
|
|
|
[ANNOUNCE] Strimzi Kafka Operators 0.17.0 is now available
Jakub Scholz
Strimzi Kafka Operators 0.17.0 has been released. The main changes since 0.16 include: * Add possibility to set Java System Properties via CR yaml * Add support for Mirror Maker 2.0 * Add Jmxtrans deployment * Add public keys of TLS listeners to the status section of the Kafka CR * Various bug-fixes * Dependency upgrades to avoid CVEs * Improved system tests and documentation For more details about the release and the upgrade procedure, please go to https://github.com/strimzi/strimzi-kafka-operator/releases/tag/0.17.0 Full list of changes can be found under the [0.17.0 milestone](https://github.com/strimzi/strimzi-kafka-operator/milestone/16?closed=1). Thanks to everyone who contributed to this release! Thanks & Regards Strimzi team
|
|
|
|
RC4 of Strimzi Kafka Operators 0.17.0 is now available
Jakub Scholz
Release Candidate 4 of Strimzi Kafka Operators 0.17.0 is now available. There is only one additional fix since RC3: * Make sure the ZookeeperScaler does work will with custom CAs without the PKCS12 files For more details about the release candidate and the upgrade procedure, please go to https://github.com/strimzi/strimzi-kafka-operator/releases/tag/0.17.0-rc4 Unless there are any new issues, we will probably release it tomorrow. Thanks & Regards Jakub
|
|
|
|
RC3 of Strimzi Kafka Operators 0.17.0 is now available
Jakub Scholz
Release Candidate 3 of Strimzi Kafka Operators 0.17.0 is now available. There are some important fixes and improvements since RC2: * Fixed NPE which happen in KafkaRoller under rare circumstances * Fix ordering of addresses in config map to avoid random rolling updates * Fix scaling of Zookeeper 3.5 * Fix several issues with Connector operator and Mirror Maker 2 * Many other bugs, test and docs improvements For more details about the release candidate and the upgrade procedure, please go to https://github.com/strimzi/strimzi-kafka-operator/releases/tag/0.17.0-rc3 Thanks & Regards Jakub
|
|
|
|
RC2 of Strimzi Kafka Operators 0.17.0 is now available
Jakub Scholz
Release Candidate 2 of Strimzi Kafka Operators 0.17.0 is now available. It took us more than two weeks since the RC1, but we spent them with a lot of testing and improving the code to make sure the quality of the 0.17 release is good. The main changes since RC1 include: * Support for pausing / resuming MM2 connectors * Fix bug in Kafka rack awareness configuration * Add network policies for Kafka connect when using the connector operator * Fix rolling update restart when configuration changes * Fix ZooKeeper scale-up bug * Validate the replication factor in relation to number of Kafka replicas * Various bug-fixes * Dependency upgrades to avoid CVEs * Improved system tests and documentation For more details about the release candidate and the upgrade procedure, please go to https://github.com/strimzi/strimzi-kafka-operator/releases/tag/0.17.0-rc2 Thanks & Regards Jakub
|
|
|
|
RC1 of Strimzi Kafka Operators 0.17.0 is now available
Jakub Scholz
The Release Candidate 1 of Strimzi Kafka Operators 0.17.0 is now available. It doesn't include many new features, but some of those included were in high demand. The main features are: * Add possibility to set Java System Properties via CR yaml * Add support for Mirror Maker 2.0 * Add Jmxtrans deployment * Add public keys of TLS listeners to the status section of the Kafka CR And of course a lot more smaller improvements and bugfixes. For more details about the release candidate and the upgrade procedure, please go to https://github.com/strimzi/strimzi-kafka-operator/releases/tag/0.17.0-rc1 Thanks Jakub
|
|
|
|
[ANNOUNCE] Strimzi Kafka OAuth library 0.3.0 release
Jakub Scholz
The 0.3.0 version of the Strimzi Kafka OAuth library for using OAuth authentication in Kafka clients and brokers has been released and should be available in the Maven repositories. The main improvements are: * The main improvements are support for ECDSA signatures in JWT tokens * Support for Keycloak Authorization Services. For more information, see the release page on GitHub: https://github.com/strimzi/strimzi-kafka-oauth/releases/tag/0.3.0 Thanks to everyone who contributed to this release. Thanks & Regards Jakub
|
|
|
|
[ANNOUNCE] Strimzi Kafka operator 0.16.2
Jakub Scholz
Strimzi Kafka Operators 0.16.2 is now available with two bug fixes: * Fix bug in upgrade when the Kafka.spec.kafka.version field is not specified * Fix network policies for port 3.11 on older Kubernetes versions For more details go to: https://github.com/strimzi/strimzi-kafka-operator/releases/tag/0.16.2 Thanks to everyone who contributed to these releases. Jakub
|
|
|
|
RC1 of Strimzi Kafka OAuth library 0.3.0
Jakub Scholz
Hi, Release Candidate 1 of the 0.3.0 version of the Strimzi Kafka OAuth library is now available for testing: https://github.com/strimzi/strimzi-kafka-oauth/releases/tag/0.3.0-rc1. The main improvements are support for ECDSA signatures in JWT tokens and support for Keycloak Authorization Services. To test it, you can use the staging Maven repository: <repositories> <repository> <id>staging</id> <url>https://oss.sonatype.org/content/repositories/iostrimzi-1054/</url> </repository> </repositories> Any feedback can be provided here or as a GitHub issue. Thanks & Regards Jakub
|
|
|
|
[ANNOUNCE] Strimzi Kafka operator 0.16.0
Jakub Scholz
Strimzi Kafka Operators 0.16.0 is now available with a lot of great new features. The main changes since 0.15.0 include: * Add support for Kafka 2.4.0 and upgrade from Zookeeper 3.4.x to 3.5.x * Drop support for Kafka 2.2.1 and 2.3.0 * Add KafkaConnector resource and connector operator * Let users choose which node address will be used as advertised host (ExternalDNS, ExternalIP, InternalDNS, InternalIP or Hostname) * Add support for tini * When not explicitly configured by the user in jvmOptions, -Xmx option is calculated from memory requests rather than from memory limits * Expose JMX port on Kafka brokers via an internal service * Add support for externalTrafficPolicy and loadBalancerSourceRanges properties on loadbalancer and nodeport type services * Support for user quotas * Possibility to specify custom server certificates to TLS based listeners * Add support for Istio protocol selection in service port names * Note: Strimzi is essentially adding a tcp- prefix to the port names in Kafka services and headless services. (e.g clientstls -> tcp-clientstls) For more details go to: https://github.com/strimzi/strimzi-kafka-operator/releases/tag/0.16.0 Thanks to everyone who contributed to these releases. Jakub
|
|
|
|
Release Candidate 2 of Strimzi Kafka Operators 0.16.0
Jakub Scholz
We found some issues in the RC1, so we prepared a new release candidate for the Strimzi 0.16.0 release. The main changes since RC1 include: * Fix to user quotas deletion * NPE in Kafka Roller * Improved documentation and system tests * and several other minor bugfixes For more details and the upgrade procedure, go to: https://github.com/strimzi/strimzi-kafka-operator/releases/tag/0.16.0-rc2 Thanks & Regards Jakub ---------- Forwarded message --------- From: Jakub Scholz <jakub@...> Date: Fri, Jan 10, 2020 at 2:31 AM Subject: Release Candidate 1 of Strimzi Kafka Operators 0.16.0 To: <cncf-strimzi-dev@...>, <cncf-strimzi-users@...> The Release Candidate 1 for Strimzi Kafka Operators 0.16.0 is now available. There is a lot of new features, so if you are interested in any of them please test them and give us feedback. The main changes since 0.15.0 include: * Add support for Kafka 2.4.0 and upgrade from Zookeeper 3.4.x to 3.5.x * Drop support for Kafka 2.2.1 and 2.3.0 * Add KafkaConnector resource and connector operator * Let users choose which node address will be used as advertised host (ExternalDNS, ExternalIP, InternalDNS, InternalIP or Hostname) * Add support for tini * When not explicitly configured by the user in jvmOptions, -Xmx option is calculated from memory requests rather than from memory limits * Expose JMX port on Kafka brokers via an internal service * Add support for externalTrafficPolicy and loadBalancerSourceRanges properties on loadbalancer and nodeport type services * Support for user quotas * Possibility to specify custom server certificates to TLS based listeners * Add support for Istio protocol selection in service port names * Note: Strimzi is essentially adding a tcp- prefix to the port names in Kafka services and headless services. (e.g clientstls -> tcp-clientstls) For more details and the upgrade procedure, go to: https://github.com/strimzi/strimzi-kafka-operator/releases/tag/0.16.0-rc1 Thanks & Regards Jakub
|
|
|
|
Release Candidate 1 of Strimzi Kafka Operators 0.16.0
Jakub Scholz
The Release Candidate 1 for Strimzi Kafka Operators 0.16.0 is now available. There is a lot of new features, so if you are interested in any of them please test them and give us feedback. The main changes since 0.15.0 include: * Add support for Kafka 2.4.0 and upgrade from Zookeeper 3.4.x to 3.5.x * Drop support for Kafka 2.2.1 and 2.3.0 * Add KafkaConnector resource and connector operator * Let users choose which node address will be used as advertised host (ExternalDNS, ExternalIP, InternalDNS, InternalIP or Hostname) * Add support for tini * When not explicitly configured by the user in jvmOptions, -Xmx option is calculated from memory requests rather than from memory limits * Expose JMX port on Kafka brokers via an internal service * Add support for externalTrafficPolicy and loadBalancerSourceRanges properties on loadbalancer and nodeport type services * Support for user quotas * Possibility to specify custom server certificates to TLS based listeners * Add support for Istio protocol selection in service port names * Note: Strimzi is essentially adding a tcp- prefix to the port names in Kafka services and headless services. (e.g clientstls -> tcp-clientstls) For more details and the upgrade procedure, go to: https://github.com/strimzi/strimzi-kafka-operator/releases/tag/0.16.0-rc1 Thanks & Regards Jakub
|
|
|
|
[ANNOUNCE] Strimzi 0.15.0 released!
Jakub Scholz
Version 0.15.0 of Strimzi Kafka Operators and Strimzi Bridge has been released. The main changes in the operators include: * Drop support for Kafka 2.1.0, 2.1.1, and 2.2.0 * Add support for Kafka 2.3.1 * Improved Kafka rolling update * Improved Kafka Exporter Grafana dashboard * Add sizeLimit option to ephemeral storage * Add `schedulerName` to `podTemplate` * Allow overriding the auto-detected Kubernetes version * Garbage Collection (GC) logging disabled by default * Providing PKCS12 truststore and password in the cluster and clients CA certificates Secrets * Providing PKCS12 keystore and password in the TLS based KafkaUser related Secret For more details and the upgrade procedure, go to: https://github.com/strimzi/strimzi-kafka-operator/releases/tag/0.15.0 The main changes in the Bridge include: * Added support for Jaeger tracing * Various bug fixes. For more details, go to: https://github.com/strimzi/strimzi-kafka-bridge/releases/tag/0.15.0 Thanks to everyone who contributed to these releases. Jakub
|
|
|
|
Re: First RCs for Strimzi 0.15.0
Tom Bentley
+1 I did some testing on minikube of the features mentioned in the release nodes and everything seemed to work as expected. Thanks Jakub!
|
|
|
|
[ANNOUNCE] Strimzi Kafka OAuth library 0.2.0 release
Jakub Scholz
Hi, The 0.2.0 version of the Strimzi Kafka OAuth library for using OAuth authentication in Kafka clients and brokers has been released and should be available in the Maven repositories. The main improvement is improved support for other OAuth servers than just Keycloak. For more information, see the release page on GitHub: https://github.com/strimzi/strimzi-kafka-oauth/releases/tag/0.2.0. Thanks to everyone who contributed to this release. Thanks & Regards Jakub
|
|
|
|
First RCs for Strimzi 0.15.0
Jakub Scholz
The Release Candidate 1 for Strimzi Kafka Operators and for Strimzi Bridge are now available. There is a lot of new features (especially for the operators), so if you are interested in any of them feel free to test them and give us feedback. The main changes in the operators include: * Drop support for Kafka 2.1.0, 2.1.1, and 2.2.0 * Add support for Kafka 2.3.1 * Improved Kafka rolling update * Improved Kafka Exporter Grafana dashboard * Add sizeLimit option to ephemeral storage * Add `schedulerName` to `podTemplate` * Allow overriding the auto-detected Kubernetes version * Garbage Collection (GC) logging disabled by default * Providing PKCS12 truststore and password in the cluster and clients CA certificates Secrets * Providing PKCS12 keystore and password in the TLS based KafkaUser related Secret For more details and the upgrade procedure, go to: https://github.com/strimzi/strimzi-kafka-operator/releases/tag/0.15.0-rc1 The main changes in the Bridge include: * Added support for Jaeger tracing * Various bug fixes. For more details, go to: https://github.com/strimzi/strimzi-kafka-bridge/releases/tag/0.15.0-rc1 Thanks & Regards Jakub
|
|
|
|
RC1 of Strimzi Kafka OAuth library 0.2.0
Jakub Scholz
Hi, Release Candidate 1 of the 0.2.0 version of the Strimzi KAfka OAuth library is now available for testing: https://github.com/strimzi/strimzi-kafka-oauth/releases/tag/0.2.0-rc1. The main improvement is improved support for other OAuth servers than just Keycloak. To test it, you can use the staging Maven repository: <repositories> <repository> <id>staging</id> <url>https://oss.sonatype.org/content/repositories/iostrimzi-1046/</url> </repository> </repositories> Any feedback can be provided here or as a GitHub issue. Thanks & Regards Jakub
|
|
|
|
Strimzi 0.14.0 released!
Jakub Scholz
Version 0.14.0 of Strimzi Kafka Operators and Strimzi Bridge has been released. Thanks to everyone involved in these releases. The main changes in the operators include: * Add support for configuring Ingress class * Add support for setting custom environment variables in all containers * Add liveness and readiness checks to Mirror Maker * Allow configuring loadBalancerIP for LoadBalancer type services * Allow setting labels and annotations for Persistent Volume Claims * Add support for Jaeger tracing in Kafka Mirror Maker and Kafka Connect * Add support for deploying Kafka Exporter * Add initial support for OAuth authentication For more details and the upgrade procedure, go to: https://github.com/strimzi/strimzi-kafka-operator/releases/tag/0.14.0 The main changes in the Bridge include: * Changed data types and enforced OpenAPI validation for `consumer.request.timeout.ms`, `enable.auto.commit`and `fetch.min.bytes`parameters on consumer creation. This is a breaking change. * Added HTTP GET method on `/consumers/{groupid}/instances/{name}/subscription` endpoint for getting subscribed topics and related assigned partitions. * Added automatic deletion of stale consumer after a configurable timeout if the HTTP DELETE is not called and the consumer is not used for a long time. * Various bug fixes. For more details, go to: https://github.com/strimzi/strimzi-kafka-bridge/releases/tag/0.14.0 Thanks & Regards Jakub
|
|
|