Skip to content

Auth: Support for GCP IAM for Google Managed Service for Apache Kafka (GMSK) #1012

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
2 tasks done
Muchembi opened this issue Apr 9, 2025 · 5 comments · May be fixed by #1013
Open
2 tasks done

Auth: Support for GCP IAM for Google Managed Service for Apache Kafka (GMSK) #1012

Muchembi opened this issue Apr 9, 2025 · 5 comments · May be fixed by #1013
Assignees
Labels
area/auth App authentication related issues scope/backend Related to backend changes status/triage/completed Automatic triage completed type/enhancement En enhancement/improvement to an already existing feature

Comments

@Muchembi
Copy link

Muchembi commented Apr 9, 2025

Issue submitter TODO list

  • I've searched for an already existing issues here
  • I'm running a supported version of the application which is listed here and the feature is not present there

Is your proposal related to a problem?

Problem:
Google Managed Service for Apache Kafka cluster does not have a native UI to view the topics and messages. Auth is doen through an IAM service account. Kafabat UI does not currently support this.

Describe the feature you're interested in

I would like to be able to view my GMSK cluster on Kafbat UI.

I should be able to set up the following config to access my GMSK cluster:

bootstrap.servers=bootstrap.CLUSTER_ID.us-central1.managedkafka.PROJECT_ID.cloud.goog:9092
security.protocol=SASL_SSL
sasl.mechanism=OAUTHBEARER
sasl.login.callback.handler.class=com.google.cloud.hosted.kafka.auth.GcpLoginCallbackHandler
sasl.jaas.config=org.apache.kafka.common.security.oauthbearer.OAuthBearerLoginModule required;

Describe alternatives you've considered

  • AKHQ -> Not very intuitive

Version you're running

715df05

Additional context

No response

@Muchembi Muchembi added status/triage Issues pending maintainers triage type/feature A brand new feature labels Apr 9, 2025
@kapybro kapybro bot added area/auth App authentication related issues status/triage/manual Manual triage in progress status/triage/completed Automatic triage completed and removed status/triage Issues pending maintainers triage labels Apr 9, 2025
Copy link

github-actions bot commented Apr 9, 2025

Hi Muchembi! 👋

Welcome, and thank you for opening your first issue in the repo!

Please wait for triaging by our maintainers.

As development is carried out in our spare time, you can support us by sponsoring our activities or even funding the development of specific issues.
Sponsorship link

If you plan to raise a PR for this issue, please take a look at our contributing guide.

@germanosin
Copy link
Member

germanosin commented Apr 9, 2025

Hi @Muchembi,
Thanks for raising the issue. Apologies, but I didn't fully understand your request. Are you looking for GCP IAM support for Apache Kafka cluster authentication? If so, you can add the required dependency to the classpath and use it directly.

If you're interested in contributing this to the core, feel free to open a PR with the necessary dependency.
Anyway thanks for your interest and time!

@Muchembi
Copy link
Author

Muchembi commented Apr 9, 2025

Hello @germanosin.

I have the code ready. It's quite similar to the PR you had shared.

Here

I can add some implementatation docs if you like.

@Muchembi Muchembi linked a pull request Apr 9, 2025 that will close this issue
13 tasks
Muchembi added a commit to Muchembi/kafka-ui that referenced this issue Apr 9, 2025
@Haarolean
Copy link
Member

@germanosin we've discussed this on discord with @Muchembi, a PR should be similar to #530 we've recently pulled

@Haarolean Haarolean added type/enhancement En enhancement/improvement to an already existing feature scope/backend Related to backend changes and removed type/feature A brand new feature status/triage/manual Manual triage in progress labels Apr 9, 2025
@germanosin
Copy link
Member

Hello @germanosin.

I have the code ready. It's quite similar to the PR you had shared.

Here

I can add some implementatation docs if you like.

Oh, great! Thanks for your contribution. I'll go through it in the next few days.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area/auth App authentication related issues scope/backend Related to backend changes status/triage/completed Automatic triage completed type/enhancement En enhancement/improvement to an already existing feature
Projects
None yet
Development

Successfully merging a pull request may close this issue.

3 participants