run the following in addition to the typical installation instructions
pip install -r ./spot-ingest/kerberos-requirements.txt
pip install -r ./spot-oa/kerberos-requirements.txt
KERBEROS = set KERBEROS='true'
in /etc/spot.conf to enable kerberos KEYTAB = should be generated using ktutil
or another approved method SASL_MECH = should be set to sasl_plaintext
unless using ssl KAFKA_SERVICE = if not set defaults will be used
SSL = enable ssl by setting to true SSL_VERIFY = by setting to false
disables host checking important only recommended in non production environments CA_LOCATION = location of certificate authority file CERT = host certificate KEY = key required for host certificate
sample below:
#kerberos config KERBEROS='true' KINIT=/usr/bin/kinit PRINCIPAL='spot' KEYTAB='/opt/security/spot.keytab' SASL_MECH='GSSAPI' SECURITY_PROTO='sasl_plaintext' KAFKA_SERVICE_NAME='' #ssl config SSL='false' SSL_VERIFY='true' CA_LOCATION='' CERT='' KEY=''
Please see LIBRDKAFKA Configurations for reference to additional settings that can be set by modifying spot-ingest/common/kafka_client.py