The scheme used for authentication with the Apache Kafka broker.

Possible Values

None, Plain, SCRAM, SCRAM-SHA-512, Kerberos, SSLCertificate, AzureAD, AzureMSI, AzureServicePrincipal, AzureServicePrincipalCert, OAuthJWT, GCPInstanceAccount, AWSWorkloadIdentity

データ型

string

デフォルト値

"None"

解説

Supported schemes for Apache Kafka:

None	Connect to the data source without specifying the user credentials. User is authenticated anonymously.
Plain	Authenticate via credentials passed in a plain text login module.
SCRAM	Authenticate via a SCRAM login module with SHA-256 hashing.
SCRAM-SHA-512	Authenticate via a SCRAM login module with SHA-512 hashing.
Kerberos	Use Kerberos authentication. (Requires you to specify the system kerberos configuration file.)
SSLCertificate	Authenticate via SSL client certificate.
AzureAD	Perform Azure Active Directory OAuth authentication.
AzureMSI	(Azure VM only) Automatically obtain Managed Service Identity credentials.
AzureServicePrincipal	Authenticate as an Azure Service Principal using a Client Secret.
AzureServicePrincipalCert	Authenticate as an Azure Service Principal using a Certificate.
OAuthJWT	Perform OAuth authentication using an OAuth service account.
GCPInstanceAccount	Obtain an Access Token from Google Cloud Platform instance.
AWSWorkloadIdentity	Authenticate using Workload Identity Federation.

Schemes for authenticating to Azure Event Hubs:

AzureAD	Perform Azure Active Directory OAuth authentication.
AzureMSI	(Azure VM only) Automatically obtain Managed Service Identity credentials.
AzureServicePrincipal	Authenticate as an Azure Service Principal using a Client Secret.
AzureServicePrincipalCert	Authenticate as an Azure Service Principal using a Certificate.

Schemes for authenticating to GMS Kafka:

OAuthJWT	Perform OAuth authentication using an OAuth service account.
GCPInstanceAccount	Obtain an Access Token from Google Cloud Platform instance.
AWSWorkloadIdentity	Authenticate using Workload Identity Federation. Since GMS Kafka does not support using external principals to authenticate directly, you must delegate to a service account using the RequestingServiceAccount property.