Support SASL_OAUTHBEARER as authentication mechanism to kafka clusters

[KyriosGN0]

Issue submitter TODO list

• I've searched for an already existing issues here
• I'm running a supported version of the application which is listed here and the feature is not present there

Is your proposal related to a problem?

I would like to use Kafka Clusters with the OAuth2 instead of username and password, for that i would also like that the KafkaUI would use the SASL_OAUTHBEARER mechanism to connect to kafka

Describe the feature you're interested in

Use SASL_OAUTHBEARER as auth mechanism for kafka clusters

Describe alternatives you've considered

keep an listener without oauth2 just for kafkaUI

Version you're running

1.4.2

Additional context

No response

[github-actions]

Hi KyriosGN0! 👋

Welcome, and thank you for opening your first issue in the repo!

Please wait for triaging by our maintainers.

As development is carried out in our spare time, you can support us by sponsoring our activities or even funding the development of specific issues.
Sponsorship link

If you plan to raise a PR for this issue, please take a look at our contributing guide.

[TigranKhudav]

Hi @KyriosGN0 try this configuration

yamlApplicationConfig:
  kafka:
    clusters:
      - name: kafka
        bootstrapServers: kafka-kafka-external-bootstrap:9094
        properties:
          ssl.endpoint.identification.algorithm: ""
          security.protocol: SASL_SSL
          sasl.mechanism: OAUTHBEARER
          socket.connection.setup.timeout.max.ms: 30000
          socket.connection.setup.timeout.ms: 30000
          sasl.oauthbearer.token.endpoint.url: https://< your oauth base url>/realms/internal/protocol/openid-connect/token
          sasl.login.callback.handler.class: org.apache.kafka.common.security.oauthbearer.secured.OAuthBearerLoginCallbackHandler
          sasl.jaas.config: org.apache.kafka.common.security.oauthbearer.OAuthBearerLoginModule required clientId='kafka' scope='openid' clientSecret=${KAFKA_UI_KEYCLOAK_CLIENT_SECRET};
  auth:
    type: OAUTH2
    oauth2:
      client:
        keycloak:
          clientId: kafka
          clientSecret: ${KAFKA_UI_KEYCLOAK_CLIENT_SECRET}
          scope: openid
          issuer-uri: https://< your oauth base url>/realms/internal
          user-name-attribute: preferred_username
          client-name: keycloak
          provider: keycloak
          custom-params:
            type: oauth
            roles-field: groups

[KyriosGN0]

@TigranKhudav That worked, Thanks!