KIP-665 — Kafka Connect Hash SMT

Discussion ConnectSecurity

Adds a `HashField` SMT that hashes the value of specified fields using a configurable algorithm (SHA-256, SHA-512, MD5, etc.) and replaces the original field value with the hash. Sensitive PII fields (SSNs, email addresses, etc.) passed through Connect pipelines need to be obfuscated before landing in downstream systems, and no out-of-the-box SMT provided cryptographic hashing.

Details