lh0156 opened a new pull request, #23039: URL: https://github.com/apache/kafka/pull/23039
## Summary Add a focused system-test path for SCRAM authentication on isolated KRaft controller quorums. The test covers both SCRAM-SHA-256 and SCRAM-SHA-512. The Kafka test service now bootstraps the controller quorum with the broker SCRAM credentials using `kafka-storage.sh --add-scram`, and the KafkaServer JAAS entry is selected from all enabled SASL mechanisms, including mechanisms used only by KRaft controller channels. ## Motivation KAFKA-15513 is not covered by the system-test harness: controller-quorum SCRAM was explicitly skipped, and formatted controller metadata did not contain the initial credentials needed for authentication. ## Testing - `./gradlew :core:test --tests kafka.tools.StorageToolTest.testBootstrapScramRecords --no-daemon --console=plain` - `./gradlew checkstyleMain checkstyleTest spotlessCheck --no-daemon --console=plain` - Python compilation and targeted SCRAM bootstrap assertions - `git diff --check` - The full ducktape test is not run locally because the ducktape/worker environment is unavailable; CI should execute `TestVerifiableProducer.test_isolated_kraft_controller_scram` for both mechanisms. ## Jira https://issues.apache.org/jira/browse/KAFKA-15513 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
