fix: kraft kerberos support - #999

Draft

razvan wants to merge 14 commits into

mainfrom

feature/kraft-kerberos-support

Commits on Aug 7, 2026

docs: add KRaft controller Kerberos implementation plan

razvan
and
claude
committed
c4a1fc3
feat: allow SASL_SSL on the KRaft CONTROLLER listener when Kerberos is enabled

razvan
and
claude
committed
5939302
feat: set sasl.mechanism.controller.protocol for Kerberos-enabled clusters

razvan
and
claude
committed
798f810
feat: support pod-scoped Kerberos keytabs for roles without a kcat prober container

razvan
and
claude
committed
a9be223
feat: mount Kerberos keytab into KRaft controller pods when enabled

razvan
and
claude
committed
36a6992
feat: generate a controller.KafkaServer JAAS section for the CONTROLLER listener

razvan
and
claude
committed
d9942ad
feat: export KERBEROS_REALM and template jaas.properties in the KRaft controller startup command

razvan
and
claude
committed
716ee14
fix: make controller_kafka_container_command byte-identical to pre-Kerberos output when disabled

razvan
and
claude
committed
6081a57
test: add kuttl integration test for Kerberos-secured KRaft clusters

razvan
and
claude
committed
93d7992
fix: use kafka-kraft dimension (not kafka) for access-kafka image in kraft-kerberos test

razvan
and
claude
committed
7dae4d6
docs: document Kerberos support for KRaft controllers

razvan
and
claude
committed
4b1d8bc
fix: address final whole-branch review findings for KRaft Kerberos

razvan
and
claude
committed
ff80034
fix: use explicit numeric offset in kraft-kerberos kcat consume step

razvan
and
claude
committed
ec80d67
docs: reflect live-cluster verification of Kerberos KRaft support

razvan
and
claude
committed
df35483

Navigation Menu

Uh oh!

Uh oh!

fix: kraft kerberos support - #999

fix: kraft kerberos support#999
razvan wants to merge 14 commits into
mainfrom
feature/kraft-kerberos-support

Commits on Aug 7, 2026

docs: add KRaft controller Kerberos implementation plan

feat: allow SASL_SSL on the KRaft CONTROLLER listener when Kerberos is enabled

feat: set sasl.mechanism.controller.protocol for Kerberos-enabled clusters

feat: support pod-scoped Kerberos keytabs for roles without a kcat prober container

feat: mount Kerberos keytab into KRaft controller pods when enabled

feat: generate a controller.KafkaServer JAAS section for the CONTROLLER listener

feat: export KERBEROS_REALM and template jaas.properties in the KRaft controller startup command

fix: make controller_kafka_container_command byte-identical to pre-Kerberos output when disabled

test: add kuttl integration test for Kerberos-secured KRaft clusters

fix: use kafka-kraft dimension (not kafka) for access-kafka image in kraft-kerberos test

docs: document Kerberos support for KRaft controllers

fix: address final whole-branch review findings for KRaft Kerberos

fix: use explicit numeric offset in kraft-kerberos kcat consume step

docs: reflect live-cluster verification of Kerberos KRaft support