Skip to content
This repository was archived by the owner on Apr 22, 2022. It is now read-only.

Commit 42f0471

Browse files
committed
Add optins to configure producing events to a kerberized kafka
1 parent b677c06 commit 42f0471

File tree

1 file changed

+33
-0
lines changed

1 file changed

+33
-0
lines changed

docs/configuration.rst

+33
Original file line numberDiff line numberDiff line change
@@ -522,6 +522,38 @@ Property: ``divolte.global.kafka.producer``
522522
retries = 5
523523
}
524524
525+
It is also possible to configure divolte to work with a kerberized Kafka cluster the following configuration snippet shows how.
526+
527+
528+
.. code-block:: none
529+
530+
divolte.global.kafka.producer = {
531+
bootstrap.servers = ["server1:9092", "server2:9092", "server3:9092"]
532+
client.id = divolte.collector
533+
534+
acks = 0
535+
retries = 5
536+
537+
sasl.jaas.config = ""
538+
sasl.jaas.config = ${?KAFKA_SASL_JAAS_CONFIG}
539+
540+
security.protocol = PLAINTEXT
541+
security.protocol = ${?KAFKA_SECURITY_PROTOCOL}
542+
sasl.mechanism = GSSAPI
543+
sasl.kerberos.service.name = kafka
544+
}
545+
546+
The :envvar:`KAFKA_SECURITY_PROTOCOL` can then be set to `SASL_PLAINTEXT` and the :envvar:`KAFKA_SASL_JAAS_CONFIG` can be set to something like:
547+
548+
.. code-block:: none
549+
550+
com.sun.security.auth.module.Krb5LoginModule required
551+
useKeyTab=true
552+
storeKey=true
553+
keyTab="/etc/security/keytabs/divolte.keytab"
554+
principal="divolte/hostname.divolte.io";
555+
556+
525557
Sources (``divolte.sources``)
526558
-----------------------------
527559

@@ -534,6 +566,7 @@ Each source has a type configured via a mandatory ``type`` property. Two types o
534566

535567
For example:
536568

569+
537570
.. code-block:: none
538571
539572
divolte.sources {

0 commit comments

Comments
 (0)