Nyalia Lui

mTLS Authz test: user migrates entire cluster to mTLS

1

* Start with enable_sasl=true * Set authentication_method=mtls_identity for all brokers * Set kafka_mtls_principal_mapping_rules and kafka_enable_authorization=true. This will enable authZ across the cluster. * Check that authZ still works on all...

## Cover letter PRs such as #4501 and #5292 extended Redpanda security to use mtls with principal mapping rules. These features are enabled with new confgs, `endpoint_authn_method` and `kafka_enable_authorization`, in...

pp: add basic auth to /brokers

3

## Cover letter Moved PR #6338 to this PR because the former had 150+ comments that became difficult to sift through. At Redpanda there is an effort to improve security...

tests/docker: update golang to 1.18

5

Otherwise test build fails with `go mod tidy: indicates go 1.18, but maximum supported version is 1.17`

Failure in `SaramaProduceTest.test_produce`

4

### Version & Environment Redpanda version: dev on CDT nightly: https://buildkite.com/redpanda/vtools/builds/4182#01845f80-c176-4aa4-b55c-816b614deec6/6-7907 ``` DucktapeError("sarama produce failed with b'/bin/sh: 1: /opt/redpanda-tests/go/sarama/produce_test/produce_test: not found\\n'") Traceback (most recent call last): File "/home/ubuntu/redpanda/tests/rptest/tests/compatibility/sarama_produce_test.py", line 55,...

Kafka Error in `TransactionsTest.graceful_leadership_transfer_test` on nightly

4

### Version & Environment Redpanda version: dev on nightly CDT: https://buildkite.com/redpanda/vtools/builds/4182#01845f80-c176-4aa4-b55c-816b614deec6/6-8089 ``` KafkaException(KafkaError{code=UNKNOWN,val=-1,str="EndTxn commit failed: Unknown broker error"}) Traceback (most recent call last): File "/home/ubuntu/.local/lib/python3.10/site-packages/ducktape/tests/runner_client.py", line 135, in run data...

TimeoutError in `PartitionBalancerScaleTest.test_node_operations_at_scale`

4

### Version & Environment Redpanda version: dev on CDT nightly: https://buildkite.com/redpanda/vtools/builds/4182#01845f80-c176-4aa4-b55c-816b614deec6/6-8067 ``` TimeoutError('') Traceback (most recent call last): File "/home/ubuntu/.local/lib/python3.10/site-packages/ducktape/tests/runner_client.py", line 135, in run data = self.run_test() File "/home/ubuntu/.local/lib/python3.10/site-packages/ducktape/tests/runner_client.py", line...

tests: wrap http proxy configs

1

## Cover letter The number of configs for the http proxy has increased since v22.3.1. So we should put them in a single location to reduce the number of params...

tests: add basic auth mtls tests

1

## Cover Letter The HTTP Proxy and Schema Registry now support HTTP Basic Authentication since v22.3.1. This PR tests those services when: 1. mTLS is the only authentication method 2....

With new changes coming into the Pandaproxy, the set of configs in our ducktape tests will also expand. Therefore, we should put these configs in a central location. _Originally posted...