Skip to content

Add support for type: custom client authentication#11760

Merged
scholzj merged 3 commits intostrimzi:mainfrom
scholzj:add-support-for-custom-client-side-authentication
Aug 26, 2025
Merged

Add support for type: custom client authentication#11760
scholzj merged 3 commits intostrimzi:mainfrom
scholzj:add-support-for-custom-client-side-authentication

Conversation

@scholzj
Copy link
Copy Markdown
Member

@scholzj scholzj commented Aug 22, 2025

Type of change

  • Enhancement / new feature

Description

This PR adds support for type: custom client authentication as proposed and approved in SP-110.

I tested this using custom SCRAM-SHA-512 configuration. I wanted to test it with the actual Amazon MSK cluster as well. But it is not exactly user-friendly (to spin up an MSK cluster to test it), so I gave up.

This should resolve #5473.

Checklist

  • Write tests
  • Make sure all tests pass
  • Update documentation
  • Try your changes from Pod inside your Kubernetes and OpenShift cluster, not just locally
  • Reference relevant issue(s) and close them after merging
  • Update CHANGELOG.md

@scholzj scholzj added this to the 0.48.0 milestone Aug 22, 2025
@scholzj scholzj added this to Roadmap Aug 22, 2025
@scholzj
Copy link
Copy Markdown
Member Author

scholzj commented Aug 22, 2025

/packit test --labels regression

@scholzj scholzj marked this pull request as ready for review August 22, 2025 23:14
@scholzj scholzj moved this to 0.48.0 (Work in Progress) in Roadmap Aug 23, 2025
Copy link
Copy Markdown
Member

@ppatierno ppatierno left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM. I left just one comment.

Signed-off-by: Jakub Scholz <www@scholzj.com>
Signed-off-by: Jakub Scholz <www@scholzj.com>
@scholzj scholzj force-pushed the add-support-for-custom-client-side-authentication branch from b92f931 to b43f138 Compare August 24, 2025 13:19
Copy link
Copy Markdown
Contributor

@PaulRMellor PaulRMellor left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good, thanks.
I left a few suggestions for the docs.

Signed-off-by: Jakub Scholz <www@scholzj.com>
@scholzj scholzj merged commit a06c913 into strimzi:main Aug 26, 2025
13 checks passed
@scholzj scholzj deleted the add-support-for-custom-client-side-authentication branch August 26, 2025 19:46
see-quick pushed a commit to see-quick/strimzi-kafka-operator that referenced this pull request Sep 4, 2025
Signed-off-by: Jakub Scholz <www@scholzj.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Status: 0.48.0

Development

Successfully merging this pull request may close these issues.

Support for AWS MSK IAM authorization

3 participants