Skip to content

1.1.0
Compare
Choose a tag to compare
@muralibasani muralibasani released this 04 Nov 10:12
· 1476 commits to main since this release
v1.1.0
1cc91a1
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.

Release Notes : Klaw 1.1.0

Date: 4th Nov, 2022

Overview

Klaw version 1.1.0 is a minor release with a couple of new features and improvements.

Breaking changes

There are no breaking changes in this release.

New features

  • Authentication protocols: Klaw 1.1.0 includes the authentication protocols SCRAM-SHA-256 and SCRAM-SHA-512, which you can use to connect to Apache Kafka clusters.

  • Enabled JWT-based authentication: Enabled JWT-based authentication to connect to Klaw Cluster API. You can configure klaw.clusterapi.access.base64.secret in both core and cluster-api modules to enable this authentication between APIs.

  • Connect to multiple clusters using SSL: This release includes the functionality to configure Klaw to connect to multiple Apache Kafka clusters with different SSL certificates. In the application.properties file located in the src/main/resources folder, look for the line starting with ssl.* and replace it with .kafkassl.*. You can find the cluster-id from the user interface under the Clusters page.

An example configuration for cluster-id ‘dev1’ is as shown below:

dev1.kafkassl.protocol=TLS
dev1.kafkassl.key.pwd=trustme
dev1.kafkassl.keystore.location=/srv/certs/client.keystore.p12
dev1.kafkassl.keystore.pwd=trustme
dev1.kafkassl.keystore.type=PKCS12
dev1.kafkassl.truststore.location=/srv/certs/client.truststore.jks
dev1.kafkassl.truststore.pwd=trustme
dev1.kafkassl.truststore.type=JKS

Improvements

This release includes the following improvements:

  • Klaw as a Maven multi-module project. The modules include
    'Core' - Core API with user interface and cluster-api connectivity.
    'Cluster-api' - This module is cloned from the main branch of repo https://github.com/aiven/klaw-cluster-api and removes the dependency on this Git repository.
  • Improved API Exception handling.
  • Code refactoring and improvements.
  • Fixed a circular dependency issue after migration to the latest Spring version.
  • Upgraded Spring boot, Kafka, and other dependencies.
  • Makefile to build and run the application

Vulnerabilities and Bug fixes

This release includes the below.

  • Removed password authentication on Klaw Cluster API and enabled JWT authentication.
  • Actuator endpoints are now exposed for metrics, health, and info, instead of a wildcard.
  • Security Configuration endpoint now returns config only to Superusers.
  • Security Configuration endpoint now returns limited config instead of whole environment variables.
  • ACL commands should not be applied on ‘Aiven for Apache Kafka’ cluster settings. This issue is now fixed.

Upgrade

To upgrade to this release, download the package from https://github.com/aiven/klaw/releases/tag/v1.1.0 and follow the instructions on Klaw documentation to upgrade. You can also refer to the README for information.

Change log

Full Changelog: 1.0.0...1.1.0

Contributors

Murali Basani
Mirjam Aulbach
Samuli Suortti
Sergey Nuyanzin
Josep Prat
Ahmed Sobeh
Dave Beech
Stefan Arentz
Sebastian Kaiser

Contributors

snuyanzin, programmiri, and 5 other contributors
Assets 2
Loading
2 Join discussion