This is an automated email from the ASF dual-hosted git repository.
exceptionfactory pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/nifi.git
The following commit(s) were added to refs/heads/main by this push:
new a0dc20b7ba6 NIFI-16077 Changed default Security Protocol for Kafka
components from PLAINTEXT to SSL (#11394)
a0dc20b7ba6 is described below
commit a0dc20b7ba6576ac376cd0c54fb685f220b6924b
Author: Wojciech Trefon <[email protected]>
AuthorDate: Mon Jul 6 18:11:20 2026 +0200
NIFI-16077 Changed default Security Protocol for Kafka components from
PLAINTEXT to SSL (#11394)
Signed-off-by: David Handermann <[email protected]>
---
.../java/org/apache/nifi/kafka/processors/AbstractKafkaBaseIT.java | 2 ++
.../org/apache/nifi/kafka/service/Kafka3ConnectionServiceBaseIT.java | 5 +++++
.../org/apache/nifi/kafka/shared/component/KafkaClientComponent.java | 2 +-
3 files changed, 8 insertions(+), 1 deletion(-)
diff --git
a/nifi-extension-bundles/nifi-kafka-bundle/nifi-kafka-3-integration/src/test/java/org/apache/nifi/kafka/processors/AbstractKafkaBaseIT.java
b/nifi-extension-bundles/nifi-kafka-bundle/nifi-kafka-3-integration/src/test/java/org/apache/nifi/kafka/processors/AbstractKafkaBaseIT.java
index f53798f2103..da2f9069ce7 100644
---
a/nifi-extension-bundles/nifi-kafka-bundle/nifi-kafka-3-integration/src/test/java/org/apache/nifi/kafka/processors/AbstractKafkaBaseIT.java
+++
b/nifi-extension-bundles/nifi-kafka-bundle/nifi-kafka-3-integration/src/test/java/org/apache/nifi/kafka/processors/AbstractKafkaBaseIT.java
@@ -23,6 +23,7 @@ import org.apache.nifi.json.JsonRecordSetWriter;
import org.apache.nifi.json.JsonTreeReader;
import org.apache.nifi.kafka.service.Kafka3ConnectionService;
import org.apache.nifi.kafka.service.api.KafkaConnectionService;
+import org.apache.nifi.kafka.shared.property.SecurityProtocol;
import org.apache.nifi.reporting.InitializationException;
import org.apache.nifi.serialization.RecordReaderFactory;
import org.apache.nifi.serialization.RecordSetWriterFactory;
@@ -78,6 +79,7 @@ public abstract class AbstractKafkaBaseIT {
final KafkaConnectionService connectionService = new
Kafka3ConnectionService();
runner.addControllerService(CONNECTION_SERVICE_ID, connectionService);
runner.setProperty(connectionService,
Kafka3ConnectionService.BOOTSTRAP_SERVERS,
kafkaContainer.getBootstrapServers());
+ runner.setProperty(connectionService,
Kafka3ConnectionService.SECURITY_PROTOCOL, SecurityProtocol.PLAINTEXT.name());
runner.setProperty(connectionService,
Kafka3ConnectionService.MAX_POLL_RECORDS, "1000");
runner.setProperty(connectionService, DYNAMIC_PROPERTY_KEY_PUBLISH,
DYNAMIC_PROPERTY_VALUE_PUBLISH);
runner.setProperty(connectionService, DYNAMIC_PROPERTY_KEY_CONSUME,
DYNAMIC_PROPERTY_VALUE_CONSUME);
diff --git
a/nifi-extension-bundles/nifi-kafka-bundle/nifi-kafka-service-shared/src/test/java/org/apache/nifi/kafka/service/Kafka3ConnectionServiceBaseIT.java
b/nifi-extension-bundles/nifi-kafka-bundle/nifi-kafka-service-shared/src/test/java/org/apache/nifi/kafka/service/Kafka3ConnectionServiceBaseIT.java
index e7cf2d36184..2960aa4bcb9 100644
---
a/nifi-extension-bundles/nifi-kafka-bundle/nifi-kafka-service-shared/src/test/java/org/apache/nifi/kafka/service/Kafka3ConnectionServiceBaseIT.java
+++
b/nifi-extension-bundles/nifi-kafka-bundle/nifi-kafka-service-shared/src/test/java/org/apache/nifi/kafka/service/Kafka3ConnectionServiceBaseIT.java
@@ -35,6 +35,7 @@ import
org.apache.nifi.kafka.service.api.producer.PublishContext;
import org.apache.nifi.kafka.service.api.producer.RecordSummary;
import org.apache.nifi.kafka.service.api.record.ByteRecord;
import org.apache.nifi.kafka.service.api.record.KafkaRecord;
+import org.apache.nifi.kafka.shared.property.SecurityProtocol;
import org.apache.nifi.reporting.InitializationException;
import org.apache.nifi.security.cert.builder.StandardCertificateBuilder;
import org.apache.nifi.security.ssl.EphemeralKeyStoreBuilder;
@@ -210,6 +211,7 @@ public class Kafka3ConnectionServiceBaseIT {
protected Map<String, String> getKafkaServiceConfigProperties() throws
InitializationException {
final Map<String, String> properties = new LinkedHashMap<>();
properties.put(Kafka3ConnectionService.BOOTSTRAP_SERVERS.getName(),
kafkaContainer.getBootstrapServers());
+ properties.put(Kafka3ConnectionService.SECURITY_PROTOCOL.getName(),
SecurityProtocol.PLAINTEXT.name());
properties.put(Kafka3ConnectionService.CLIENT_TIMEOUT.getName(),
CLIENT_TIMEOUT);
properties.put(DELIVERY_TIMEOUT_MS_KEY, DELIVERY_TIMEOUT_MS_VALUE);
properties.put(FETCH_MAX_WAIT_MS_KEY, FETCH_MAX_WAIT_MS_VALUE);
@@ -324,6 +326,7 @@ public class Kafka3ConnectionServiceBaseIT {
final String bootstrapServers = kafkaContainer.getBootstrapServers();
final Map<PropertyDescriptor, String> properties = Map.of(
Kafka3ConnectionService.BOOTSTRAP_SERVERS, bootstrapServers,
+ Kafka3ConnectionService.SECURITY_PROTOCOL,
SecurityProtocol.PLAINTEXT.name(),
Kafka3ConnectionService.CLIENT_TIMEOUT, CLIENT_TIMEOUT
);
final MockConfigurationContext configurationContext = new
MockConfigurationContext(properties, null, null);
@@ -342,6 +345,7 @@ public class Kafka3ConnectionServiceBaseIT {
final String bootstrapServers = "127.0.0.1:707070";
final Map<PropertyDescriptor, String> properties = Map.of(
Kafka3ConnectionService.BOOTSTRAP_SERVERS, bootstrapServers,
+ Kafka3ConnectionService.SECURITY_PROTOCOL,
SecurityProtocol.PLAINTEXT.name(),
Kafka3ConnectionService.CLIENT_TIMEOUT, CLIENT_TIMEOUT
);
final MockConfigurationContext configurationContext = new
MockConfigurationContext(properties, null, null);
@@ -357,6 +361,7 @@ public class Kafka3ConnectionServiceBaseIT {
void testVerifyConnectionFailed() {
final Map<PropertyDescriptor, String> properties = Map.of(
Kafka3ConnectionService.BOOTSTRAP_SERVERS,
UNREACHABLE_BOOTSTRAP_SERVERS,
+ Kafka3ConnectionService.SECURITY_PROTOCOL,
SecurityProtocol.PLAINTEXT.name(),
Kafka3ConnectionService.CLIENT_TIMEOUT, CLIENT_TIMEOUT
);
final MockConfigurationContext configurationContext = new
MockConfigurationContext(properties, null, null);
diff --git
a/nifi-extension-bundles/nifi-kafka-bundle/nifi-kafka-shared/src/main/java/org/apache/nifi/kafka/shared/component/KafkaClientComponent.java
b/nifi-extension-bundles/nifi-kafka-bundle/nifi-kafka-shared/src/main/java/org/apache/nifi/kafka/shared/component/KafkaClientComponent.java
index ffda9cebd56..f2fa22bb51d 100644
---
a/nifi-extension-bundles/nifi-kafka-bundle/nifi-kafka-shared/src/main/java/org/apache/nifi/kafka/shared/component/KafkaClientComponent.java
+++
b/nifi-extension-bundles/nifi-kafka-bundle/nifi-kafka-shared/src/main/java/org/apache/nifi/kafka/shared/component/KafkaClientComponent.java
@@ -47,7 +47,7 @@ public interface KafkaClientComponent {
.required(true)
.expressionLanguageSupported(ExpressionLanguageScope.NONE)
.allowableValues(SecurityProtocol.values())
- .defaultValue(SecurityProtocol.PLAINTEXT.name())
+ .defaultValue(SecurityProtocol.SSL.name())
.build();
PropertyDescriptor SASL_MECHANISM = new PropertyDescriptor.Builder()
