KIP-421 — Support resolving externalized secrets in AbstractConfig
Accepted Kafka 2.3 ConnectAdmin
Adds a ConfigProvider SPI to Kafka's config system that allows config values to be resolved from external sources (Vault, environment variables, files) at startup using a ${provider:key} syntax in config files. Secrets like passwords and credentials are currently stored in plaintext in server.properties and connector configs, with no standard mechanism to retrieve them from secret managers.
Details
| Author | TEJAL ADSUL |
| Status | Accepted |
| Kafka Version | 2.3 |
| JIRA | KAFKA-7847 |
| Wiki | View on Apache Wiki |
| Created | 2019-01-21 |
| Last Modified | 2019-05-13 |
Explore how this KIP affects the Kafka protocol in the Protocol Explorer, or see the full KIP database.