Skip to content

[v26.1.x] rpk: add OAUTHBEARER SASL mechanism support#30306

Merged
david-yu merged 1 commit intov26.1.xfrom
manual-backport-30169-v26.1.x-181
Apr 28, 2026
Merged

[v26.1.x] rpk: add OAUTHBEARER SASL mechanism support#30306
david-yu merged 1 commit intov26.1.xfrom
manual-backport-30169-v26.1.x-181

Conversation

@david-yu
Copy link
Copy Markdown
Contributor

@david-yu david-yu commented Apr 27, 2026

Backport of PR #30169

Release Notes

Features

  • Add OAUTHBEARER SASL mechanism support to rpk, enabling OIDC-based authentication for the Kafka client, admin API, and schema registry. Pass the token via --password (raw value or token: format) with --sasl-mechanism OAUTHBEARER.

@david-yu david-yu added this to the v26.1.x-next milestone Apr 27, 2026
@david-yu david-yu added the kind/backport PRs targeting a stable branch label Apr 27, 2026
Add OAUTHBEARER as a supported SASL mechanism in rpk, alongside the
existing SCRAM-SHA-256 and SCRAM-SHA-512 mechanisms.

- toSASLConfig and NewFranzClient now dispatch on OAUTHBEARER to set
  up kgo.SASL with the bearer token from the profile's sasl.password
- toRpadminOptions similarly calls WithOAuthBearerAuthentication for
  the admin client
- OAUTHBEARER is rejected early in remote debug bundle (follow-up
  issue referenced in the guard comment)
- Update -X help text and profile docs to list all SASL mechanisms
  including PLAIN and OAUTHBEARER
- Add unit tests for the SASL dispatch paths in adminapi, franz client,
  and schema registry client; fix $HOME-unset failures in those tests
- Regenerate BUILD files for new test files

(cherry picked from commits in PR #30169)
@david-yu david-yu force-pushed the manual-backport-30169-v26.1.x-181 branch from ff4a73e to 285e5f2 Compare April 27, 2026 19:57
@david-yu david-yu linked an issue Apr 27, 2026 that may be closed by this pull request
@david-yu david-yu requested a review from c-julin April 27, 2026 20:02
@david-yu david-yu marked this pull request as ready for review April 28, 2026 02:47
@david-yu david-yu requested review from a team, kbatuigas and r-vasquez as code owners April 28, 2026 02:47
@david-yu david-yu merged commit 4293d74 into v26.1.x Apr 28, 2026
26 checks passed
@david-yu david-yu deleted the manual-backport-30169-v26.1.x-181 branch April 28, 2026 16:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area/build area/rpk kind/backport PRs targeting a stable branch

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[v26.1.x] rpk: add OAUTHBEARER SASL mechanism support

2 participants