From 8f0c4b811a8c42ef278d8ca183f44f69fcee83e3 Mon Sep 17 00:00:00 2001 From: micheleRP Date: Tue, 9 Dec 2025 16:22:11 -0700 Subject: [PATCH 1/2] DOC-1855 SR support for SASL/PLAIN in SM --- local-antora-playbook.yml | 2 +- .../pages/disaster-recovery/shadowing/setup.adoc | 16 +++++++++++++++- 2 files changed, 16 insertions(+), 2 deletions(-) diff --git a/local-antora-playbook.yml b/local-antora-playbook.yml index 391a6df4d..e3ec36f59 100644 --- a/local-antora-playbook.yml +++ b/local-antora-playbook.yml @@ -17,7 +17,7 @@ content: - url: https://github.com/redpanda-data/docs branches: [v/*, shared, site-search,'!v-end-of-life/*'] - url: https://github.com/redpanda-data/cloud-docs - branches: 'main' + branches: 'DOC-1621-Document-Cloud-Feature-Shadowing-Disaster-Recovery-Enterprise' - url: https://github.com/redpanda-data/redpanda-labs branches: main start_paths: [docs,'*/docs'] diff --git a/modules/manage/pages/disaster-recovery/shadowing/setup.adoc b/modules/manage/pages/disaster-recovery/shadowing/setup.adoc index db1f2ba3f..9b77fa673 100644 --- a/modules/manage/pages/disaster-recovery/shadowing/setup.adoc +++ b/modules/manage/pages/disaster-recovery/shadowing/setup.adoc @@ -93,7 +93,7 @@ This service account authenticates from the shadow cluster to the source cluster You must configure network connectivity between clusters with appropriate firewall rules to allow the shadow cluster to connect to the source cluster for data replication. Shadowing uses a pull-based architecture where the shadow cluster fetches data from the source cluster. For detailed networking configuration, see <>. ifndef::env-cloud[] -If using xref:manage:security/authentication.adoc[authentication] for the shadow link connection, configure the source cluster with your chosen authentication method (SASL/SCRAM, TLS, mTLS) and ensure the shadow cluster has the proper credentials to authenticate to the source cluster. +If using xref:manage:security/authentication.adoc[authentication] for the shadow link connection, configure the source cluster with your chosen authentication method (SASL/SCRAM, SASL/PLAIN, TLS, mTLS) and ensure the shadow cluster has the proper credentials to authenticate to the source cluster. endif::[] ifdef::env-cloud[] @@ -156,10 +156,17 @@ client_options: do_not_set_sni_hostname: false # Optional: Skip SNI hostname when using TLS (default: false) authentication_configuration: + # SASL/SCRAM authentication scram_configuration: username: # SASL/SCRAM username, example: "shadow-replication-user" password: # SASL/SCRAM password, example: "secure-password-123" scram_mechanism: SCRAM_SHA_256 # SCRAM mechanism: "SCRAM_SHA_256" or "SCRAM_SHA_512" +ifndef::env-cloud[] + # SASL/PLAIN authentication + plain_configuration: + username: # SASL/PLAIN username, example: "shadow-replication-user" + password: # SASL/PLAIN password, example: "secure-password-123" +endif::[] # Connection tuning - adjust based on network characteristics metadata_max_age_ms: 10000 # How often to refresh cluster metadata (default: 10000ms) @@ -476,10 +483,17 @@ client_options: ---- client_options: authentication_configuration: + # SASL/SCRAM authentication scram_configuration: username: # SASL/SCRAM username, example: "shadow-replication-user" password: # SASL/SCRAM password, example: "secure-password-123" scram_mechanism: SCRAM_SHA_256 # SCRAM mechanism: "SCRAM_SHA_256" or "SCRAM_SHA_512" +ifndef::env-cloud[] + # SASL/PLAIN authentication + plain_configuration: + username: # SASL/PLAIN username, example: "shadow-replication-user" + password: # SASL/PLAIN password, example: "secure-password-123" +endif::[] ---- ==== Connection tuning From 43f9518819b80c096d9e03851af1d528d436432c Mon Sep 17 00:00:00 2001 From: micheleRP Date: Tue, 9 Dec 2025 21:41:42 -0700 Subject: [PATCH 2/2] revert playbook --- local-antora-playbook.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/local-antora-playbook.yml b/local-antora-playbook.yml index e3ec36f59..391a6df4d 100644 --- a/local-antora-playbook.yml +++ b/local-antora-playbook.yml @@ -17,7 +17,7 @@ content: - url: https://github.com/redpanda-data/docs branches: [v/*, shared, site-search,'!v-end-of-life/*'] - url: https://github.com/redpanda-data/cloud-docs - branches: 'DOC-1621-Document-Cloud-Feature-Shadowing-Disaster-Recovery-Enterprise' + branches: 'main' - url: https://github.com/redpanda-data/redpanda-labs branches: main start_paths: [docs,'*/docs']