Kafka Cluster

Connect kPow to Apache Kafka®

Set the ENVIRONMENT_NAME variable to provide a UI friendly name for your Kafka cluster.

Requirements

kPow requires at least one configured Kafka cluster to operate.

When configuring Multi-Cluster installations the first cluster configured is your Primary Cluster and contains all the snapshot, metrics, and audit metadata for the installation.

Each configured Kafka cluster can have one associated Schema registry and/or Kafka connect cluster.

Compatibility

kPow is compatible with Apache Kafka 1.0+.

kPow has been tested and is compatible with Apache Kafka, Red Had AMQ Streams, Aiven Managed Kafka, Instaclustr Managed Kafka, Confluent Platform and Confluent Cloud*.

*Some disk related metrics and telemetry are not available when using kPow with Confluent Cloud.

FIPS

kPow is capable of integrating with FIPS compliant Kafka clusters.

Contact [email protected] for assistance.

Access Control

User permissions to Kafka cluster resources are defined by Cluster actions.

Configuration

kPow connects to a Kafka cluster with exactly the same configuration as a Kafka consumer or producer.

This configuration may be familiar to you, and is provided to kPow by environment variables.

The list of connection variables follows, many are optional. Consult the Kafka client docs for more info.

Variable

Description

ENVIRONMENT_NAME

UI friendly label for this cluster and resources

BOOTSTRAP

The Kafka cluster bootstrap URL

SECURITY_PROTOCOL

PLAINTEXT, SSL, SASL_PLAINTEXT, or SASL_SSL

SASL_MECHANISM

GSSAPI, AUTHBEARER, SCRAM, PLAIN,

SASL_JAAS_CONFIG

Java Authentication and Authorization Service config

SSL_KEYSTORE_LOCATION

The path to a keystore for auth with certificates

SSL_KEYSTORE_PASSWORD

The password to access the auth keystore

SSL_KEY_PASSWORD

The password of the key within the keystore

SSL_KEYSTORE_TYPE

The file format of the keystore file

SSL_KEYMANAGER_ALGORITHM

The key manager algorithm used for SSL

SSL_TRUSTSTORE_LOCATION

The path to a truststore for auth with certificates

SSL_TRUSTSTORE_PASSWORD

The password to access the auth truststore

SSL_TRUSTSTORE_TYPE

The file format of the truststore file

SSL_TRUSTMANAGER_ALGORITHM

The trust manager algorithm user for SSL

SSL_ENDPOINT_IDENTIFICATION_ALGORITHM

Often required when authenticating via SSL

SSL_PROVIDER

Name of the security provider used for SSL

SSL_CIPHER_SUITES

A list of cipher suites

SSL_PROTOCOL

TLS, TLSv1.1, or TLSv1.2

SSL_ENABLED_PROTOCOLS

The list of protocols enabled for SSL