diff options
| author | J. Eric Ivancich <ivancich@redhat.com> | 2024-05-09 20:35:34 +0200 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2024-05-09 20:35:34 +0200 |
| commit | 08633499b8de50770d7b60481165aee5289eb40a (patch) | |
| tree | 6e4b7f362ee5590dcde617efe19f6f1b6cbf034b /doc/radosgw | |
| parent | Merge pull request #57075 from cbodley/wip-rgw-ldap-derr (diff) | |
| parent | rgw/s3-notifications: removed logic to dump POST body to prevent printing pas... (diff) | |
| download | ceph-08633499b8de50770d7b60481165aee5289eb40a.tar.xz ceph-08633499b8de50770d7b60481165aee5289eb40a.zip | |
Merge pull request #56493 from igomon-bloomberg/wip_kafka_sasl_username_password_attrs
rgw/s3-notifications: use user-name/password topic attributes for SASL authentication
Reviewed-by: Yuval Lifshitz <ylifshit@ibm.com>
Diffstat (limited to 'doc/radosgw')
| -rw-r--r-- | doc/radosgw/notifications.rst | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/doc/radosgw/notifications.rst b/doc/radosgw/notifications.rst index aa9a55ef966..76e8209bd28 100644 --- a/doc/radosgw/notifications.rst +++ b/doc/radosgw/notifications.rst @@ -164,6 +164,8 @@ updating, use the name of an existing topic and different endpoint values). [&Attributes.entry.13.key=max_retries&Attributes.entry.13.value=<retries number>] [&Attributes.entry.14.key=retry_sleep_duration&Attributes.entry.14.value=<sleep seconds>] [&Attributes.entry.15.key=Policy&Attributes.entry.15.value=<policy-JSON-string>] + [&Attributes.entry.16.key=user-name&Attributes.entry.16.value=<user-name-string>] + [&Attributes.entry.17.key=password&Attributes.entry.17.value=<password-string>] Request parameters: @@ -252,6 +254,10 @@ Request parameters: - user/password: This should be provided over HTTPS. If not, the config parameter `rgw_allow_notification_secrets_in_cleartext` must be `true` in order to create topics. - user/password: This should be provided together with ``use-ssl``. If not, the broker credentials will be sent over insecure transport. - mechanism: may be provided together with user/password (default: ``PLAIN``). The supported SASL mechanisms are: + - ``user-name``: User name to use when connecting to the Kafka broker. If both this parameter and URI user are provided then this parameter overrides the URI user. + The same security considerations are in place for this parameter as are for user/password. + - ``password``: Password to use when connecting to the Kafka broker. If both this parameter and URI password are provided then this parameter overrides the URI password. + The same security considerations are in place for this parameter as are for user/password. - PLAIN - SCRAM-SHA-256 |