knative / knative/eventing

Support authentication for cloud resources using IAM roles

Open
#8,544 2 comments 3 reactions 0 assignees View on GitHub
kind/feature-request triage/accepted
Dominant language
Go
Stars
1.6k
Forks
631
Avg merge
2d 1h
Merged PRs (30d)
6

Description

**Problem**

We urgently need IAM role-based authentication for AWS resources, especially AWS MSK, within Knative Eventing. Currently, only username/password authentication is documented for MSK [here](https://knative.dev/docs/eventing/brokers/broker-types/kafka-broker/#set-as-default-broker-implementation)), which is less secure and cumbersome than IAM roles.

This feature is critical for our AWS integration and aligns with best practices. Is there an existing IAM authentication method I've missed? Are there plans to implement this? We're on AWS cloud and using Knative Eventing 1.17.4

This feature request is not just for MSK, but for supporting IAM based authentication for all the cloud resources.

**[Persona:](https://github.com/knative/eventing/blob/main/docs/personas.md)**
Which persona is this feature for?
System Operator

**Exit Criteria**
Authetication to cloud resources such as S3, MSK, cloudStorage using IAM role based access.

Contributor guide

Open the contributing guide

Research direction

Start with the Kafka broker authentication documentation linked in the issue and compare its username/password approach with AWS IAM role requirements for MSK. Broaden the investigation to the requested S3 and cloud storage resources; done means IAM role-based authentication works for those cloud resources, including the stated MSK use case.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws, go, kafka
Domain
authentication, cloud
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.