Kafka encryption and authentication using SSL

This topic describes optional SSL configurations that a tenant administrator can set using the deprecated Read from Apache Kafka with SSL and Write to Kafka with SSL functions.

To use the deprecated Read from Apache Kafka with SSL and Write to Kafka with SSL functions, a tenant administrator must set the following configurations. Alternatively, use the Kafka SSL Connector.

Configuration name	Description
K8S_KAFKA_SSL_BROKER_KEYSTORE_LOCATION	The location of the broker's keystore file.
K8S_KAFKA_SSL_BROKER_KEYSTORE_PASSWORD	The password for the broker's keystore file.
K8S_KAFKA_SSL_BROKER_KEYSTORE_PASSWORD_BASE64	The password for the broker's keystone file, encoded in Base64.
K8S_KAFKA_SSL_BROKER_KEY_PASSWORD	The password of the broker's private key in the keystore file.
K8S_KAFKA_SSL_BROKER_KEY_PASSWORD_BASE64	The password of the broker's private key in the keystore file, encoded in Base64.
K8S_KAFKA_SSL_CLIENT_KEYSTORE_LOCATION	The location of the client's keystore file.
K8S_KAFKA_SSL_CLIENT_KEYSTORE_PASSWORD_BASE64	The location of the client's keystore file, encoded in Base64.
K8S_KAFKA_SSL_CLIENT_KEY_PASSWORD	The password of the client's private key in the keystore file.
K8S_KAFKA_SSL_CLIENT_KEY_PASSWORD_BASE64	The password of the client's private key in the keystore file, encoded in Base64.
K8S_KAFKA_SSL_TRUSTSTORE_LOCATION	The location of the trust store file.
K8S_KAFKA_SSL_TRUSTSTORE_PASSWORD	The password for the trust store file.
K8S_KAFKA_SSL_TRUSTSTORE_PASSWORD_BASE64	The password for the trust store file, encoded in Base64.