conduktor.io ↗

KIP-421 — Support resolving externalized secrets in AbstractConfig

Accepted Kafka 2.3 ConnectAdmin

Adds a ConfigProvider SPI to Kafka's config system that allows config values to be resolved from external sources (Vault, environment variables, files) at startup using a ${provider:key} syntax in config files. Secrets like passwords and credentials are currently stored in plaintext in server.properties and connector configs, with no standard mechanism to retrieve them from secret managers.

Details

AuthorTEJAL ADSUL
StatusAccepted
Kafka Version2.3
JIRAKAFKA-7847
WikiView on Apache Wiki
Created2019-01-21
Last Modified2019-05-13
Explore how this KIP affects the Kafka protocol in the Protocol Explorer, or see the full KIP database.