Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Allow for sourcing of Fluent Bit Kafka Rdkafka values from secrets #1152

Open
jeff303 opened this issue Apr 28, 2024 · 0 comments
Open

Allow for sourcing of Fluent Bit Kafka Rdkafka values from secrets #1152

jeff303 opened this issue Apr 28, 2024 · 0 comments

Comments

@jeff303
Copy link
Contributor

jeff303 commented Apr 28, 2024

Is your feature request related to a problem? Please describe.

Currently, the Kafka struct declares the Rdkafka map as map[string]string, which means that values must be stored in plaintext in the CRD. However, when connecting to a Kafka broker using SASL_SSL (i.e. when there is a username/password corresponding to the API key/secret, respectively), then it would be better to not store those values in plaintext.

Describe the solution you'd like

Modify the Rdkafka map to allow for values to be either string or *plugins.Secret. That way, users can designate a secret ref for particular values (such as sasl.username and sasl.password), so they don't need to be provided in plaintext at the CRD level.

Additional context

This is useful in multi-tenant scenarios.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant