Fix Console migration guide

modules/console/pages/config/security/authentication.adoc

@@ -107,7 +107,7 @@ Here is an example configuration for **runtime acquisition mode**:
 [,yaml]
 ----
 authentication:
-  jwtSigningSecret: "<secret-key>"  <1>
+  jwtSigningKey: "<secret-key>"  <1>
   useSecureCookies: true  <2>
   oidc:
     enabled: true  <3>
@@ -125,7 +125,7 @@ authentication:
     prompt: "consent"  <10>
 ----
 
-<1> `authentication.jwtSigningSecret` (required): The secret key for signing JWTs. Keep it confidential. It must be at least 32 characters long. Use xref:console:config/configure-console.adoc#environment-variables[environment variables] or command-line flags for sensitive data.
+<1> `authentication.jwtSigningKey` (required): The secret key for signing JWTs. Keep it confidential. It must be at least 32 characters long. Use xref:console:config/configure-console.adoc#environment-variables[environment variables] or command-line flags for sensitive data.
 <2> `authentication.useSecureCookies`: A boolean flag indicating whether session cookies should be marked as secure. This should be set to true in production environments to enforce HTTPS.
 <3> `authentication.oidc.enabled` (required): Enables OIDC-based authentication. When enabled, external identity providers can be used for single sign-on.
 <4> `authentication.oidc.issuerUrl` (required): The URL of the OIDC identity provider.
@@ -141,7 +141,7 @@ Here is an example configuration for **static token mode**:
 [,yaml]
 ----
 authentication:
-  jwtSigningSecret: "<secret-key>"
+  jwtSigningKey: "<secret-key>"
   useSecureCookies: true
   oidc:
     enabled: true
@@ -175,7 +175,7 @@ authentication:
   basic:
     enabled: true <3>
 ----
-<1> `authentication.jwtSigningSecret` (required): The secret key for signing JWTs. Keep it confidential. Minimum 32 characters. Use xref:console:config/configure-console.adoc#environment-variables[environment variables] or command-line flags for sensitive data.
+<1> `authentication.jwtSigningKey` (required): The secret key for signing JWTs. Keep it confidential. Minimum 32 characters. Use xref:console:config/configure-console.adoc#environment-variables[environment variables] or command-line flags for sensitive data.
 <2> `authentication.useSecureCookies`: A boolean flag indicating whether the JWT cookie should be marked as secure. Set to true in production to enforce HTTPS.
 <3> `authentication.basic.enabled` (required): Enables or disables basic (username/password) authentication. When enabled, credentials are mapped to SASL-SCRAM for Kafka.
 

modules/get-started/pages/quick-start.adoc

@@ -202,7 +202,7 @@ Suppose you're asked to find all transactions related to the `.edu` domain. You
 // (step {"action":"find", "selector": "[data-testid='add-topic-filter-javascript']", "matchText": "JavaScript Filter", "click": true, "timeout": 10000})
 . Give your filter a name, such as "Find .edu domains".
 // (step {"action":"find", "selector": "[data-testid='add-javascript-filter-name']", "typeKeys": "Find .edu domains", "click": true, "timeout": 10000})
-// (step {"action":"saveScreenshot", "path": "js-filter.png", "directory": "../../modules/console/images", "overwrite": "byVariation", "maxVariation": 10})
+// (step {"action":"saveScreenshot", "path": "js-filter.png", "directory": "../../modules/console/images", "overwrite": "byVariation", "maxVariation": 30})
 +
 image::console:js-filter.png[]
 

modules/get-started/pages/release-notes/redpanda.adoc

@@ -32,7 +32,7 @@ See xref:console:config/security/authentication.adoc[] for more information.
 
 * **Authentication and authorization:**
   - Renamed the `login` stanza to `authentication`.
-  - Renamed `login.jwtSecret` to `authentication.jwtSigningSecret`.
+  - Renamed `login.jwtSecret` to `authentication.jwtSigningKey`.
   - Removed the plain login provider.
   - OIDC group-based authorization is no longer supported.
   - Role bindings must now be configured in the `authorization.roleBindings` stanza (no longer stored in a separate file).
@@ -52,7 +52,7 @@ See xref:console:config/security/authentication.adoc[] for more information.
   - Renamed the `connect` stanza to `kafkaConnect` to avoid ambiguity with Redpanda Connect.
 
 * **Console settings:**
-  - Moved `console.maxDeserializationPayloadSize` to `serde.console.maxDeserializationPayloadSize`.
+  - Moved `console.maxDeserializationPayloadSize` to `serde.maxDeserializationPayloadSize`.
 
 *Action required*: xref:upgrade:migrate/console-v3.adoc[].
 

modules/shared/attachments/redpanda-console-config.yaml

@@ -82,7 +82,7 @@ schemaRegistry:
 # Console authentication
 #----------------------------------------------------------------------------
 authentication:
-  jwtSigningSecret: "secret-value"
+  jwtSigningKey: "secret-value"
   useSecureCookies: true
   # Optionally enable cookie chunking if cookie size is an issue.
   # useCookieChunking: false

modules/upgrade/pages/deprecated/index.adoc

@@ -285,7 +285,7 @@ See xref:upgrade:migrate/console-v3.adoc[].
 
 | v3.0.0
 | `login.jwtSecret`
-| The field `login.jwtSecret` has been renamed to `authentication.jwtSigningSecret` to reflect its purpose more accurately.
+| The field `login.jwtSecret` has been renamed to `authentication.jwtSigningKey` to reflect its purpose more accurately.
 
 | v3.0.0
 | Group-based authorization through OIDC

modules/upgrade/pages/migrate/console-v3.adoc

@@ -58,7 +58,7 @@ schemaRegistry:
   authentication:
     impersonateUser: true
 authentication:  <2>
-  jwtSigningSecret: "secret-key"
+  jwtSigningKey: "secret-key"
   useSecureCookies: false
   basic:
     enabled: true  <3>
@@ -99,7 +99,7 @@ redpanda:
         password: "some-other-secret-password"
       #bearerToken: "example-bearer-token" # For OAuth2 bearer token
 authentication:
-  jwtSigningSecret: "secret-key"
+  jwtSigningKey: "secret-key"
   useSecureCookies: false
   basic:
     enabled: true
@@ -155,7 +155,7 @@ kafka:
     enabled: true
     impersonateUser: true <1>
 authentication: <2>
-  jwtSigningSecret: "old-google-secret"
+  jwtSigningKey: "old-google-secret"
   useSecureCookies: true
   oidc: <3>
     enabled: true
@@ -289,15 +289,14 @@ connect:
 [source,yaml,role="no-wrap"]
 ----
 serde:
+  maxDeserializationPayloadSize: 20480
   protobuf:
     enabled: false
     mappings: []
   cbor:
     enabled: false
   messagePack:
     enabled: false
-  console:
-    maxDeserializationPayloadSize: 20480
 kafkaConnect:
   enabled: false
   clusters: []