kafka部署之简单密钥

一、说明

• centos7.9
• kafka_2.13-2.7.0.tgz
• apache-zookeeper-3.8.0-bin.tar.gz
• 官方文档：Apache Kafka

二、kafka配置

2.1、server.properties

server.properties修改或增加如下配置

listeners=SASL_PLAINTEXT://你的主机ip:9092
super.users=User:admin
authorizer.class.name=kafka.security.authorizer.AclAuthorizer
security.inter.broker.protocol=SASL_PLAINTEXT 
sasl.mechanism.inter.broker.protocol=PLAIN 
sasl.enabled.mechanisms=PLAIN
allow.everyone.if.no.acl.found=false

2.2、kafka_server_jaas.conf

在config目录下创建如下文件kafka_server_jaas.conf

KafkaServer {
    org.apache.kafka.common.security.plain.PlainLoginModule required
    username="admin"
    password="admin-secret"
    user_admin="admin-secret"
    user_alice="alice-secret";
};

3.2、kafka-server-start.sh

export KAFKA_OPTS="$KAFKA_OPTS -Djava.security.auth.login.config=$base_dir/../config/kafka_server_jaas.conf"

3.3、启动kafka节点

sh kafka-server-start.sh -daemon ../config/server.properties

三、补充说明（未测试）

网上还有一种说法，在server.properties增加如下配置，便不需要kafka_server_jaas.conf文件

listener.name.sasl_plaintext.plain.sasl.jaas.config=org.apache.kafka.common.security.plain.PlainLoginModule required \
   username="admin" \
   password="admin-secret" \
   user_admin="admin-secret" \
   user_alice="alice-secret";