From 52fe281a0772ed29b255d579d50e410ab719cf87 Mon Sep 17 00:00:00 2001 From: Bitnami Bot Date: Wed, 9 Aug 2023 14:12:56 +0200 Subject: [PATCH] [bitnami/kafka] Release 3.3.2-debian-11-r188 (#44015) Signed-off-by: Bitnami Containers --- bitnami/kafka/3.3/debian-11/Dockerfile | 4 ++-- .../rootfs/opt/bitnami/scripts/kafka-env.sh | 20 ------------------- bitnami/kafka/README.md | 12 +++++------ 3 files changed, 8 insertions(+), 28 deletions(-) diff --git a/bitnami/kafka/3.3/debian-11/Dockerfile b/bitnami/kafka/3.3/debian-11/Dockerfile index a056d9753a13..9888b487cfd3 100644 --- a/bitnami/kafka/3.3/debian-11/Dockerfile +++ b/bitnami/kafka/3.3/debian-11/Dockerfile @@ -8,10 +8,10 @@ ARG TARGETARCH LABEL com.vmware.cp.artifact.flavor="sha256:1e1b4657a77f0d47e9220f0c37b9bf7802581b93214fff7d1bd2364c8bf22e8e" \ org.opencontainers.image.base.name="docker.io/bitnami/minideb:bullseye" \ - org.opencontainers.image.created="2023-08-07T11:22:04Z" \ + org.opencontainers.image.created="2023-08-09T11:05:53Z" \ org.opencontainers.image.description="Application packaged by VMware, Inc" \ org.opencontainers.image.licenses="Apache-2.0" \ - org.opencontainers.image.ref.name="3.3.2-debian-11-r186" \ + org.opencontainers.image.ref.name="3.3.2-debian-11-r188" \ org.opencontainers.image.title="kafka" \ org.opencontainers.image.vendor="VMware, Inc." \ org.opencontainers.image.version="3.3.2" diff --git a/bitnami/kafka/3.3/debian-11/rootfs/opt/bitnami/scripts/kafka-env.sh b/bitnami/kafka/3.3/debian-11/rootfs/opt/bitnami/scripts/kafka-env.sh index 1d31c9ceb364..5a0a8fb6b456 100644 --- a/bitnami/kafka/3.3/debian-11/rootfs/opt/bitnami/scripts/kafka-env.sh +++ b/bitnami/kafka/3.3/debian-11/rootfs/opt/bitnami/scripts/kafka-env.sh @@ -35,17 +35,7 @@ kafka_env_vars=( KAFKA_TLS_INTER_BROKER_AUTH KAFKA_TLS_CONTROLLER_AUTH KAFKA_OPTS - KAFKA_CFG_LISTENERS - KAFKA_CFG_ADVERTISED_LISTENERS - KAFKA_CFG_LISTENER_SECURITY_PROTOCOL_MAP - KAFKA_CFG_ZOOKEEPER_CONNECT - KAFKA_CFG_CONTROLLER_QUORUM_VOTERS KAFKA_CFG_SASL_ENABLED_MECHANISMS - KAFKA_CFG_SASL_MECHANISM_INTER_BROKER_PROTOCOL - KAFKA_CFG_SASL_MECHANISM_CONTROLLER_PROTOCOL - KAFKA_CFG_INTER_BROKER_LISTENER_NAME - KAFKA_CFG_MAX_REQUEST_SIZE - KAFKA_CFG_MAX_PARTITION_FETCH_BYTES KAFKA_KRAFT_CLUSTER_ID KAFKA_SKIP_KRAFT_STORAGE_INIT KAFKA_CLIENT_LISTENER_NAME @@ -105,17 +95,7 @@ export KAFKA_TLS_CONTROLLER_AUTH="${KAFKA_TLS_CONTROLLER_AUTH:-$KAFKA_TLS_CLIENT export KAFKA_OPTS="${KAFKA_OPTS:-}" # Kafka configuration overrides -export KAFKA_CFG_LISTENERS="${KAFKA_CFG_LISTENERS:-}" -export KAFKA_CFG_ADVERTISED_LISTENERS="${KAFKA_CFG_ADVERTISED_LISTENERS:-}" -export KAFKA_CFG_LISTENER_SECURITY_PROTOCOL_MAP="${KAFKA_CFG_LISTENER_SECURITY_PROTOCOL_MAP:-}" -export KAFKA_CFG_ZOOKEEPER_CONNECT="${KAFKA_CFG_ZOOKEEPER_CONNECT:-}" -export KAFKA_CFG_CONTROLLER_QUORUM_VOTERS="${KAFKA_CFG_CONTROLLER_QUORUM_VOTERS:-}" export KAFKA_CFG_SASL_ENABLED_MECHANISMS="${KAFKA_CFG_SASL_ENABLED_MECHANISMS:-PLAIN,SCRAM-SHA-256,SCRAM-SHA-512}" -export KAFKA_CFG_SASL_MECHANISM_INTER_BROKER_PROTOCOL="${KAFKA_CFG_SASL_MECHANISM_INTER_BROKER_PROTOCOL:-}" -export KAFKA_CFG_SASL_MECHANISM_CONTROLLER_PROTOCOL="${KAFKA_CFG_SASL_MECHANISM_CONTROLLER_PROTOCOL:-}" -export KAFKA_CFG_INTER_BROKER_LISTENER_NAME="${KAFKA_CFG_INTER_BROKER_LISTENER_NAME:-}" -export KAFKA_CFG_MAX_REQUEST_SIZE="${KAFKA_CFG_MAX_REQUEST_SIZE:-}" -export KAFKA_CFG_MAX_PARTITION_FETCH_BYTES="${KAFKA_CFG_MAX_PARTITION_FETCH_BYTES:-}" export KAFKA_KRAFT_CLUSTER_ID="${KAFKA_KRAFT_CLUSTER_ID:-}" export KAFKA_SKIP_KRAFT_STORAGE_INIT="${KAFKA_SKIP_KRAFT_STORAGE_INIT:-false}" export KAFKA_CLIENT_LISTENER_NAME="${KAFKA_CLIENT_LISTENER_NAME:-}" diff --git a/bitnami/kafka/README.md b/bitnami/kafka/README.md index a32a741b3e1c..89fa4592b74f 100644 --- a/bitnami/kafka/README.md +++ b/bitnami/kafka/README.md @@ -188,9 +188,9 @@ The configuration can easily be setup with the Bitnami Apache Kafka Docker image * `KAFKA_ZOOKEEPER_TLS_TRUSTSTORE_PASSWORD`: Apache Kafka Zookeeper truststore file password. No defaults. * `KAFKA_ZOOKEEPER_TLS_VERIFY_HOSTNAME`: Verify Zookeeper hostname on TLS certificates. Defaults: **true**. * `KAFKA_ZOOKEEPER_TLS_TYPE`: Choose the TLS certificate format to use. Allowed values: `JKS`, `PEM`. Defaults: **JKS**. -* `KAFKA_CFG_LISTENERS`: Kafka `listeners` configuration override. Default: **PLAINTEXT://:9092,CONTROLLER://:9093** -* `KAFKA_CFG_ADVERTISED_LISTENERS`: Kafka `advertised.listeners` configuration override. Default: **PLAINTEXT://:9092** -* `KAFKA_CFG_SASL_ENABLED_MECHANISMS`: Allowed mechanism when using SASL either for clients, inter broker, or zookeeper comunications. Allowed values: `PLAIN`, `SCRAM-SHA-256`, `SCRAM-SHA-512` or a comma separated combination of those values. Default: **PLAIN,SCRAM-SHA-256,SCRAM-SHA-512**. NOTE: KRaft mode does not yet support SCRAM mechanisms, so this list will be automatically reduced to only `PLAIN` SASL mechanism. +* `KAFKA_CFG_LISTENERS`: Kafka `listeners` configuration override. No defaults. +* `KAFKA_CFG_ADVERTISED_LISTENERS`: Kafka `advertised.listeners` configuration override. No defaults. +* `KAFKA_CFG_SASL_ENABLED_MECHANISMS`: Allowed mechanism when using SASL either for clients, inter broker, or zookeeper comunications. Allowed values: `PLAIN`, `SCRAM-SHA-256`, `SCRAM-SHA-512` or a comma separated combination of those values. Default: **PLAIN,SCRAM-SHA-256,SCRAM-SHA-512**. NOTE: KRaft <= 3.4 does not yet support SCRAM mechanisms, so this list will be automatically reduced to only `PLAIN` SASL mechanism. * `KAFKA_TLS_CLIENT_AUTH`: Configures kafka brokers to request client authentication. Allowed values: `required`, `requested`, `none`. Defaults: **required**. * `KAFKA_TLS_INTER_BROKER_AUTH`: Configures TLS authentication method for kafka inter-broker communications. Defaults: **KAFKA_TLS_CLIENT_AUTH**. * `KAFKA_TLS_CONTROLLER_AUTH`: Configures TLS authentication method for kafka control plane communications. Defaults: **KAFKA_TLS_CLIENT_AUTH**. @@ -199,10 +199,10 @@ The configuration can easily be setup with the Bitnami Apache Kafka Docker image * `KAFKA_CLIENT_PASSWORDS`: Passwords for the users specified at`KAFKA_CLIENT_USERS`. Separated by commas. Default: **bitnami** * `KAFKA_CFG_MAX_PARTITION_FETCH_BYTES`: The maximum amount of data per-partition the server will return. No defaults. * `KAFKA_CFG_MAX_REQUEST_SIZE`: The maximum size of a request in bytes. No defaults. -* `KAFKA_CFG_SASL_MECHANISM_INTER_BROKER_PROTOCOL`: SASL mechanism to use for inter broker communications. No defaults. NOTE: KRaft mode does not yet support SCRAM mechanisms, so the only supported SASL mechanism in KRaft mode would be `PLAIN`. +* `KAFKA_CFG_SASL_MECHANISM_INTER_BROKER_PROTOCOL`: SASL mechanism to use for inter broker communications. No defaults. NOTE: KRaft <= 3.4 does not yet support SCRAM mechanisms, so the only supported SASL mechanism in KRaft mode would be `PLAIN`. * `KAFKA_INTER_BROKER_USER`: Apache Kafka inter broker communication user. Default: **user**. * `KAFKA_INTER_BROKER_PASSWORD`: Apache Kafka inter broker communication password. Default: **bitnami**. -* `KAFKA_CFG_SASL_MECHANISM_CONTROLLER_PROTOCOL`: SASL mechanism to use for controllers communications. No defaults. NOTE: KRaft mode does not yet support SCRAM mechanisms, so the only supported SASL mechanism in KRaft mode would be `PLAIN`. +* `KAFKA_CFG_SASL_MECHANISM_CONTROLLER_PROTOCOL`: SASL mechanism to use for controllers communications. No defaults. NOTE: KRaft <= 3.4 does not yet support SCRAM mechanisms, so the only supported SASL mechanism in KRaft mode would be `PLAIN`. * `KAFKA_CONTROLLER_USER`: Apache Kafka controllers communication user. Default: **controller_user**. * `KAFKA_CONTROLLER_PASSWORD`: Apache Kafka controllers communication password. Default: **bitnami**. * `KAFKA_CFG_PROCESS_ROLES`: Node roles when running in KRaft mode. No defaults. @@ -447,7 +447,7 @@ When deploying a Apache Kafka cluster with multiple brokers, inter broker commun * `KAFKA_INTER_BROKER_USER`: Apache Kafka inter broker communication user. * `KAFKA_INTER_BROKER_PASSWORD`: Apache Kafka inter broker communication password. -NOTE: When running in KRaft mode, KAFKA_CFG_SASL_MECHANISM_INTER_BROKER_PROTOCOL only supports `PLAIN` mechanism. +NOTE: When running in KRaft mode, KAFKA_CFG_SASL_MECHANISM_INTER_BROKER_PROTOCOL only supports `PLAIN` mechanism in Kafka version <= 3.4. #### Control plane communications