Skip to content

Releases: grepplabs/kafka-proxy

v0.3.1

07 Feb 22:05
77eeaea
Compare
Choose a tag to compare

Changelog

v0.3.0

21 Aug 15:00
Compare
Choose a tag to compare

Changelog

4f3b89f TLS v1.3, empty values (default settings) of proxy-listener-cipher-suites and proxy-listener-curve-preferences config parameters will configure default golang TLS CipherSuites and CurvePreferences instead of preconfigured ones. Naming of provided proxy-listener-cipher-suites names was changed e.g. from ECDHE-ECDSA-AES256-GCM-SHA384 to TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384.
3161c06 Add doc table with supported Kafka versions

v0.2.9

11 Jul 13:52
Compare
Choose a tag to compare

Changelog

5c0fd2f Kafka 2.8.0 support
afed55e Merge pull request #81 from Klarrio/add-TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
e8adfc7 Add TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 cipher as a minimum to enable access from Databrics clusters.
980e27c Merge pull request #80 from SmithJohnTaylor/patch-1
5ac42d6 Update README.md
4dfed54 Merge pull request #77 from radekg/multiple-client-certs-fixes
a147ea7 Don't switch on errors. Fix flag default: empty list instead of single empty string. Unquote single quoted arguments.
d09f219 golang 1.15
fc3fd8f Merge pull request #76 from p53/export-schema-fields
b7212f7 Merge pull request #74 from Klarrio/multiple-client-cert-validation-subjects
c6fdb52 Export schema fields to be usable outside of protocol package
d2de59c testCertValuesSlicesRegexpSubject use the same error as in testCertValuesSlicesStringSubject
0ff634d testCertValuesSlicesStringSubject use field value instead of hard coded one
9f5ba37 Sort expected values at the parse time
5065196 Reuse previously compiled regexp for pattern subject
8d0c7df Remove unnecessary boolean condition in tlsClientCertVerificationFunc
82d4f4b Improve parser
a8d5e7c remove parsedsubject.validate, improve errors, tests
ed58731 Change term header to prefix
3235cad Implement multiple client certificatevalidation subjects.
1cd3d28 Merge pull request #72 from p53/oidc-password-grant
6a400c5 Add password grant for oidc provider

v0.2.8

12 Oct 12:21
Compare
Choose a tag to compare

Changelog

38062e1 Release 0.2.8
d1f92e4 LDAP plugin: rename flag ldap-cacert to ldap-ca-cert-file, new flag ldap-insecure-skip-verify
04f8a27 Merge branch 'master' of https://github.com/db3f/kafka-proxy into db3f-master
d33de9b Added flag for LDAP searches not requiring to bind with a user; Added a flag for providing a certificate to check the LDAP server's identity
207b558 Merge remote-tracking branch 'upstream/master' into master
3766e8e Remooved unused function
7a009ad t push origin masterMerge branch 'grepplabs-master' Sync to amster repo
777afab Sync to master repo
47982a9 Changed auth-ldap plugin to optionally retrieve the user dn from LDAP instead of constructing it locally

v0.2.7

06 Oct 20:35
Compare
Choose a tag to compare

Changelog

1bf975d Release 0.2.7
4c7dd35 Build additional image with all plugins
14a5936 Fix int32 and int64 array length decoders
7befa1f Merge pull request #67 from p53/fix-get-string-array
3beb68d Fix getStringArray, in that method, when length was -1 it was returning length of 4.10e9

v0.2.6

29 Sep 18:16
Compare
Choose a tag to compare

Changelog

a4c2911 Release 0.2.6
b8d1fee Merge pull request #65 from Klarrio/fix-certificate-validation
3c385ba Init expected cert data only once
7ce2980 extract getClientCertExpectedData
7f01d78 Move verify func to a separate function, make subject field a type, style
0db5165 Add response header version mapping for DescribeUserScramCredentials and AlterUserScramCredentials
8177347 Client certificate subject validation: ignore non-required subject fields when validating cert, allow different order, ignore empty requirements
ae48d8e Make flags for client certificate validation consistent. Document.
ae34407 Merge pull request #60 from Klarrio/proxy-tls-client-subject
88b2f57 Merge pull request #59 from grepplabs/ldap-filter
e4dc4ac Implement client certificate subject validation
228229b Allow user group membership check in ldap plugin

v0.2.5

14 Jul 22:35
Compare
Choose a tag to compare

Changelog

c0288b7 Release 0.2.5
0e6ee1d Merge branch 'bugfix/produce-ack-0'
6eaafe8 Test default request handler
78ffb1b Create FUNDING.yml
0c55763 Allow disabling produce required acks check
fec2378 Do not wait for produce response when acks is 0
e5d29a5 Create FUNDING.yml
45e9794 Dynamic listener: advertise default-listener-ip if dynamic-advertised-listener is not provided
7e9b6b9 Merge pull request #56 from Chrisss93/dynamicListenerAddress
5a6417e new flag
878b182 Migrate from dep to go mod

v0.2.4

29 Jun 23:01
Compare
Choose a tag to compare

Changelog

5d4fce8 Release 0.2.4
e7a4ce0 Local sasl authenticate tests
5d5404a response header v1
66edf1d sasl auth v2
9a257e8 Merge pull request #48 from p53/create-new-token-provider-oidc-plugin
a8e6f69 Remove notes
ff54070 Add tests
21f0ff9 SaslAuthenticate version 1
03676d2 Merge pull request #47 from p53/field-schema-create
24c23c8 Add methods for getting subschemas, fields, allow to use Schema also to create request programatically
a37ae66 Merge pull request #43 from p53/unsecured-branch
1e638a3 Notes for me
1efdfd6 Add algorithm option to unsecured jwt
c95d0a2 Add client oauth2 clientcredentials package
55af91c Created new oidc token provider plugin

v0.2.3

31 May 09:11
Compare
Choose a tag to compare

Changelog

f311f6d Release 0.2.3 - Same client cert check feature. Huge thanks everyone to @mgusiew-guide and @mantkiewicz
4ff48db Rename flag same-client-cert-enable to tls-same-client-cert-enable
251c596 Fix error message
0f429f5 Merge pull request #42 from mgusiew-guide/SameClientCertEnable
6f5c93c Execute tests in CI
33609c6 Implement same client cert check feature
f8a7531 Add docker hub badge

v0.2.2

23 May 07:22
Compare
Choose a tag to compare

Changelog

bcf639e Custom field names for json logger
d6039ca Remove deprecated BuildNameToCertificate