Kafka Connect – Externalizing Secrets – KIP 297
In order to connect with a data source or sink, we need to use credentials. Kafka Connect added support for specifying credential using config providers. The support for file config provider is available with the installation package. This is discussed in KIP 297. The KIP was released in Apache Kafka 2.
https://cwiki.apache.org/confluence/display/KAFKA/KIP-297%3A+Externalizing+Secrets+for+Connect+Configurations
Here is the JIRA.
https://issues.apache.org/jira/browse/KAFKA-6886
Changes in worker properties file [etc/schema-registry/connect-avro-distributed.properties]
Fix to mask passwords from REST interface:
Since the connectors are exposed through the RESTful service from Connect, the user credentials will be returned as a response. An additional update was required to fix this. This was worked as KAFKA-5117.
https://issues.apache.org/jira/browse/KAFKA-5117
KAFKA-5117
The fix for RESTful service was released in Kafka 2.1.x.
https://issues.apache.org/jira/browse/KAFKA-5117
If you are using Confluent Version, it should be available in 5.1.x.
https://docs.confluent.io/current/installation/versions-interoperability.html
Credentials File
Here is the credentials file couchbase.properties: