-
Feature
-
Resolution: Done
-
Normal
-
None
-
None
-
None
-
False
-
False
-
Undefined
1. Proposed title of this feature request
Send Logs to Kafka With SASL authentication
2. What is the nature and description of the request?
Currently, tls method is available to send logs to kaka CU requested to have SASL authentication log forwarding
3. Why does the customer need this? (List the business requirements here)
Currently, Customer forwarding Logs to Kafka Using fluent instances with a custom config map and this method will be deprecated, unable switch to the ClusterLogForwarder because there is only the option for plaintext and ssl without authentication or SSL with certificate-based authentication, hence cu want to have SASL authentication in Log forwarding,
4. List any affected packages or components.
[OBSDA-352] Cluster LogForwarder to send Logs to Kafka with SASL authentication
This is complete in Cluster Logging for Vector: https://github.com/openshift/cluster-logging-operator/blob/master/docs/features/collection.adoc#authorization-and-authentication
Only solution is to either use another Fluentd, configure it as you want (it's yours) and you basically setup us to send to this new instance (similar to what customers have done in 3.11); or fo to unmanaged and make the modifications you need directly. But bear in mind that "unmanaged" means we can't support you anymore.
Do we have any alternative to do this, some workaround? The migration has already started. We were thinking of using a Kafka Conect to consume directly from Elastic, as we cannot make migration unviable ...
So PLAIN should be available soon with this ticket: LOG-1369 which is part of this epic LOG-1022. Let me know if this fits your customers expectation.
SASL is not really enough for me to understand the requirements. Again, Fluentd supports three types under SASL: GSSAPI, Plain, and SCRAM. Which one is your customer using?
I removed the client's name so as not to make some questions public ...
The Bank is migrating to Openshift 4.6, it used IBM Cloud Private, which in place of EFK uses ELK, and the logstash allowed this path.
jamparke@redhat.com , is that supported in Vector in RHOL 5.5 and newer? or in a newer release?