Topics

KafkaConnect resource - how to use SASL_SSL

alonisser@...
 

For connection for my kafka instance (by eventhub kafka facade) I need the following properties
security.protocol=SASL_SSL
producer.sasl.mechanism=SASL_SSL
consumer.sasl.mechanism=SASL_SSL

I've verified that with them this does work as expected 
But I can't find how to configure the KafkaConnect resource to use them
I can't use "config" directly because those properties are limited to strimzi managment only and are disregarded 
I've followed kafka_connect_config_generator.sh generator (that generates the /tmp/ properties file the connect actually runs
and found those lines
if [ "$KAFKA_CONNECT_TLS" = "true" ]; then
    SECURITY_PROTOCOL="SSL"
 
# And somewhere after that
if [ -n "$KAFKA_CONNECT_SASL_MECHANISM" ]; then
    if [ "$SECURITY_PROTOCOL" = "SSL" ]; then
        SECURITY_PROTOCOL="SASL_SSL"
    else
        SECURITY_PROTOCOL="SASL_PLAINTEXT"
    fi

And checking the actually generated file I see I have SASL_PLAINTEXT
So the question is how do I setup tls to true, without needing to add the certificates/secrets etc.. (because the properties file that does work, doesn't actually need them) 


using 16.0 rc1

alonisser@...
 

Turns out that adding 
ssl :{}
in the spec. does the trick :)