Cp-docker-images: Support Kerberos in Kafka Connect JDBC

[johnnywiller]

According to https://docs.confluent.io/current/installation/docker/docs/security.html Kafka Connect Docker don't support security yet.

Is this right?

There is a plan to support Kerberos with SASL?

[OneCricketeer]

I believe we were discussing this on Slack?

Did you eventually get it working?

[johnnywiller]

Yes, you're right, Thanks for helping me.

I solved setting the properties on Connect:

KAFKA_OPTS: -Djava.security.auth.login.config=/etc/kafka-connect/secrets/jaas.conf
                  -Djava.security.krb5.conf=/etc/kafka-connect/secrets/krb5.conf
                  -Dsun.security.krb5.debug=true
      # Connect worker
      CONNECT_SECURITY_PROTOCOL: SASL_PLAINTEXT
      CONNECT_SASL_JAAS_CONFIG: com.sun.security.auth.module.Krb5LoginModule required \
                                useKeyTab=true \
                                storeKey=true \
                                doNotPrompt=true \
                                useTicketCache=false \
                                debug=true \
                                serviceName="kafka" \
                                keyTab="/etc/kafka-connect/secrets/principalname.keytab" \
                                principal="principalname@KDC";
      CONNECT_SASL_MECHANISM: GSSAPI