-
Notifications
You must be signed in to change notification settings - Fork 61
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add option to skip validation when dealing with schema registry #97
Add option to skip validation when dealing with schema registry #97
Conversation
This PR adds a `validate_schema_registry` option to the plugin, allowing users to bypass the schema registry validation while using a plugin. This is a common issue when using authenticated schema registry, as the validation occurs outside of the 'KafkaConsumer' code, and will require considerable effort to maintain parity with that method. This configuration option has 2 settings `auto` and `skip`. The default `auto` setting will skip validation when schema registry auth is used that is known to fail, currently when Kerberos authentication is used, but will try and validate in other cases. `skip` will skip regardless of authentication method.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Functionality looks good. I've left a couple nitpicks.
[id="plugins-{type}s-{plugin}-validate_schema_registry"] | ||
===== `schema_registry_validation` | ||
|
||
* Value can be either of: `auto`, `skip` |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
👍🏼 I like the auto
/skip
here. It conveys the complexity a lot better than a true
/false
would, and similarly doesn't convey promises that we will validate it (if it isn't set, or we can't validate) or that we won't ever do so (e.g., when we start using it and it doesn't provide what we need).
Co-authored-by: Ry Biesemeyer <[email protected]>
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Code LGTM 👍🏼
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Anchors don't match between the table and description, and would crash the docs build. Pick your favorite.
I left suggested wording inline for your consideration. We do some of our best work when we iterate, so your suggestions to my suggestions are welcome (as always). :-)
Co-authored-by: Karen Metts <[email protected]>
@karenzone I've made the changes, ready for another round |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
This PR adds a
validate_schema_registry
option to the plugin, allowingusers to bypass the schema registry validation while using a plugin. This is
a common issue when using authenticated schema registry, as the validation occurs
outside of the 'KafkaConsumer' code, and will require considerable effort to maintain
parity with that method.
This configuration option has 2 settings
auto
andskip
. The defaultauto
settingwill skip validation when schema registry auth is used that is known to fail, currently
when Kerberos authentication is used, but will try and validate in other cases.
skip
will skip regardless of authentication method.
Thanks for contributing to Logstash! If you haven't already signed our CLA, here's a handy link: https://www.elastic.co/contributor-agreement/