Skip to content

Is enabling TLS necessary for initiating scram-sha-512 authentication? #12227

@melin

Description

@melin

The following YAML code removes the line "authentication: type: scram-sha-512", which enables the creation of a Kafka cluster. Has the deletion failed? Just want to use scram-sha-512 and not enable TLS

apiVersion: kafka.strimzi.io/v1beta2
kind: Kafka
metadata:
  name: prod-cluster
  namespace: kafka
  annotations:
    strimzi.io/node-pools: enabled
    strimzi.io/kraft: enabled
spec:
  kafka:
    config:
      offsets.topic.replication.factor: 3
      transaction.state.log.replication.factor: 3
      transaction.state.log.min.isr: 2
      default.replication.factor: 3
      min.insync.replicas: 2
    authorization:
      type: simple
    listeners:
        - name: plain
          port: 9092
          type: internal
          tls: false
        - name: tls
          port: 9093
          type: internal
          tls: false
        - name: external1
          port: 9094
          type: nodeport
          tls: false
          authentication:
            type: scram-sha-512
          configuration:
            bootstrap:
              nodePort: 32309
    version: 4.1.1
    metadataVersion: 4.1-IV1
  entityOperator:
    userOperator: {}
    topicOperator: {}
  jvmOptions:
    -Xms: "512m"
    -Xmx: "1g"

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions