[
https://issues.apache.org/jira/browse/KAFKA-4544?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16619211#comment-16619211
]
ASF GitHub Bot commented on KAFKA-4544:
---------------------------------------
asasvari opened a new pull request #5660: KAFKA-4544: Add system tests for
delegation token based authentication
URL: https://github.com/apache/kafka/pull/5660
*More detailed description of your change,
if necessary. The PR title and PR message become
the squashed commit message, so use a separate
comment to ping reviewers.*
This change adds some basic system tests for delegation token based
authentication:
- basic delegation token creation
- producing with a delegation token
- consuming with a delegation token
- expiring a delegation token
- producing with an expired delegation token
New files:
- delegation_tokens.py: a wrapper around kafka-delegation-tokens.sh -
executed in container where a secure Broker is running (taking advantage of
automatic cleanup)
- delegation_tokens_test.py: basic test to validate the lifecycle of a
delegation token
Changes were made in the following file to extend their functionality:
- config_property was updated to be able to configure Kafka brokers with
delegation token related settings
- jaas.conf template because a broker needs to support multiple login
modules when delegation tokens are used
- consule-consumer and verifiable_producer to override KAFKA_OPTS (to
specify custom jaas.conf) and the client properties (to authenticate with
delegation token).
*Summary of testing strategy (including rationale)
for the feature or bug fix. Unit and/or integration
tests are expected for any behaviour change and
system tests should be considered for larger changes.*
### Committer Checklist (excluded from commit message)
- [ ] Verify design and implementation
- [ ] Verify test coverage and CI build status
- [ ] Verify documentation (including upgrade notes)
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
[email protected]
> Add system tests for delegation token based authentication
> ----------------------------------------------------------
>
> Key: KAFKA-4544
> URL: https://issues.apache.org/jira/browse/KAFKA-4544
> Project: Kafka
> Issue Type: Sub-task
> Components: security
> Reporter: Ashish Singh
> Assignee: Attila Sasvari
> Priority: Major
>
> Add system tests for delegation token based authentication.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
