Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

docs(oauth): updates example client config for truststore #10969

Merged
merged 1 commit into from
Jan 6, 2025
Merged

docs(oauth): updates example client config for truststore #10969

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion documentation/modules/oauth/con-oauth-authentication-client.adoc
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -108,7 +108,7 @@ sasl.login.callback.handler.class=io.strimzi.kafka.oauth.client.JaasClientOauthL
<4> URI of the authorization server token endpoint.
<5> Client ID, which is the name used when creating the _client_ in the authorization server.
<6> Client secret created when creating the _client_ in the authorization server.
<7> The location contains the public key certificate (`truststore.p12`) for the authorization server.
<7> The location of the public key certificate for the authorization server.
<8> The password for accessing the truststore.
<9> The truststore type.
<10> (Optional) The `scope` for requesting the token from the token endpoint.
Expand Down
8 changes: 3 additions & 5 deletions documentation/modules/oauth/proc-oauth-authorization-keycloak-example.adoc
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -328,8 +328,6 @@ The Kafka image used in this example contains Kafka producer and consumer binari

* ZooKeeper and Kafka are running in the Kubernetes cluster to be able to send and receive messages.
* The xref:proc-oauth-authorization-keycloak-example-authentication_{context}[interactive CLI Kafka client session] is started.
+
{ApacheKafkaDownload}.

.Setting up client and admin user configuration

Expand All @@ -348,7 +346,7 @@ sasl.mechanism=OAUTHBEARER
sasl.jaas.config=org.apache.kafka.common.security.oauthbearer.OAuthBearerLoginModule required \
oauth.client.id="team-a-client" \
oauth.client.secret="team-a-client-secret" \
oauth.ssl.truststore.location="/tmp/truststore.p12" \
oauth.ssl.truststore.location="/tmp/oauth-truststore.p12" \
oauth.ssl.truststore.password="$STOREPASS" \
oauth.ssl.truststore.type="PKCS12" \
oauth.token.endpoint.uri="https://$SSO_HOST/realms/kafka-authz/protocol/openid-connect/token" ;
Expand All @@ -373,7 +371,7 @@ sasl.mechanism=OAUTHBEARER
sasl.jaas.config=org.apache.kafka.common.security.oauthbearer.OAuthBearerLoginModule required \
oauth.client.id="team-b-client" \
oauth.client.secret="team-b-client-secret" \
oauth.ssl.truststore.location="/tmp/truststore.p12" \
oauth.ssl.truststore.location="/tmp/oauth-truststore.p12" \
oauth.ssl.truststore.password="$STOREPASS" \
oauth.ssl.truststore.type="PKCS12" \
oauth.token.endpoint.uri="https://$SSO_HOST/realms/kafka-authz/protocol/openid-connect/token" ;
Expand Down Expand Up @@ -408,7 +406,7 @@ sasl.mechanism=OAUTHBEARER
sasl.jaas.config=org.apache.kafka.common.security.oauthbearer.OAuthBearerLoginModule required \
oauth.refresh.token="$REFRESH_TOKEN" \
oauth.client.id="kafka-cli" \
oauth.ssl.truststore.location="/tmp/truststore.p12" \
oauth.ssl.truststore.location="/tmp/oauth-truststore.p12" \
oauth.ssl.truststore.password="$STOREPASS" \
oauth.ssl.truststore.type="PKCS12" \
oauth.token.endpoint.uri="https://$SSO_HOST/realms/kafka-authz/protocol/openid-connect/token" ;
Expand Down
1 change: 0 additions & 1 deletion documentation/shared/attributes.adoc
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -103,7 +103,6 @@
:ApacheKafkaConsumerConfig: link:https://kafka.apache.org/documentation/#consumerconfigs[Apache Kafka configuration documentation for consumers^]
:ApacheKafkaProducerConfig: link:https://kafka.apache.org/documentation/#producerconfigs[Apache Kafka configuration documentation for producers^]
:ApacheKafkaFileSystem: link:https://kafka.apache.org/documentation/#filesystems[Filesystem Selection^]
:ApacheKafkaDownload: link:http://kafka.apache.org/[Apache Kafka download^]
:ApacheLoggers: link:https://logging.apache.org/[Apache logging services^]
:CruiseControlProject: https://github.com/linkedin/cruise-control[Cruise Control^]
:CruiseControlConfigDocs: link:https://github.com/linkedin/cruise-control/wiki/Configurations[Cruise Control documentation^]
Expand Down
Loading