fluent / fluent/fluent-operator

Allow for sourcing of Fluent Bit Kafka Rdkafka values from secrets

Open
#1,152 9 comments 0 reactions 0 assignees View on GitHub
help wanted
Dominant language
Go
Stars
682
Forks
328
Avg merge
2d 23h
Merged PRs (30d)
13

Description

### Is your feature request related to a problem? Please describe.

Currently, the `Kafka` struct declares the `Rdkafka` map as `map[string]string`, which means that values must be stored in plaintext in the CRD. However, when connecting to a Kafka broker using `SASL_SSL` (i.e. when there is a username/password corresponding to the API key/secret, respectively), then it would be better to not store those values in plaintext.

### Describe the solution you'd like

Modify the `Rdkafka` map to allow for values to be either `string` or `*plugins.Secret`. That way, users can designate a secret ref for particular values (such as `sasl.username` and `sasl.password`), so they don't need to be provided in plaintext at the CRD level.

### Additional context

This is useful in multi-tenant scenarios.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.